Advanced Mac file restrictions?

No, that's not possible on macOS - and it's not possible on other operating systems either.

Essentially if the user has administrative access, can install their own programs, and they're able to read the file (which is necessary in order to use it with Parallels Desktop) - they'll also be able to copy the file.

However you can do other things to get nearer to the goals that end-users will be able to (a) run your virtual desktop and (b) not copy your image file.

A common way of doing this is to run the virtual machine image on a server, and only allow access over a remote desktop protocol to use the programs on the image. This is often accomplished using Citrix or various solutions from other vendors such as VMware or Microsoft.

Another option you have is to limit the computers physically. For example some companies "glue" USB ports and similar to ensure that users cannot easily plugin external drives. You can do that with USB-C and Thunderbolt ports as well, but you'll also have to think in copying over the network. If you have to disable WiFi and other networking options as well, you'll probably end up with unusable computers.