Log into root WHM then go to reseller center and select the reseller you want to give shell permisions to. Then click on Edit Privileges/Nameservers. Make sure he has "Prevent Accounts from being created with shell access" unchecked and "Allow Creation of Packages with Shell Access" checked.