delegating limited privileges for user account administration

--sCnJkpT3MpGTT1j9
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline

I need to be able to delegate certain user administration tasks (basic
moves, adds and changes)  I can do this by allowing access to useradd,
usermod and userdel via sudo, but I believe that also would allow those
users to escalate their own privileges.  (for instance, using usermod to
add themselves to the wheel group)  That is sub-optimal...

Suggestions?

--kurt

--sCnJkpT3MpGTT1j9
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/BsfZJPpRNiftIEYRApd/AJ9jrl0eDIrjdmJ9kw6ExCp6N+PKwQCdEj8Q
18UsQdXU+wt/UYFetzDjoos=
=yoZH
-----END PGP SIGNATURE-----

--sCnJkpT3MpGTT1j9--