We've recently hired an employee and would like to give him access to do things through WHM without giving out full root privileges via shell to reduce the risk of screwups. I was just curious how other people were handling this situation? The only thing I've come up with is: 1) Disable root password logins (should have this anyway) 2) Don't allow the user in the wheel group so he can't su to root 3) Give sudo access to commands you'd like him to be able to do as root via shell Does anybody have any better suggestions or see a problem with my proposed solution? I haven't seen any plausible way of creating a separate "root" user for WHM to use since it seems to be linked directly to the UNIX users. If this is wrong, please point me in the right direction. Thanks!