I’d avoid trying to modify the Super Admin role directly, since WordPress multisite treats it differently from normal roles. A safer approach is to use custom capability checks/hooks to block sensitive actions such as plugin/theme updates while allowing teachers to create sites and users. This is much more reliable than simply hiding admin menu items with CSS.
