I think there is not a deactivate privilege, the write privilege allows deactivation as per this article on MSDN, https://msdn.microsoft.com/en-gb/library/gg327825.aspx
But since you are using CRM 2013 I think you could use a real-time synchronous workflow to prevent deactivation for specified users and/or teams.