WHM Administrators

We've recently hired an employee and would like to give him access to do things through WHM without giving out full root privileges via shell to reduce the risk of screwups. I was just curious how other people were handling this situation?

The only thing I've come up with is:

1) Disable root password logins (should have this anyway)

2) Don't allow the user in the wheel group so he can't su to root

3) Give sudo access to commands you'd like him to be able to do as root via shell

Does anybody have any better suggestions or see a problem with my proposed solution?

I haven't seen any plausible way of creating a separate "root" user for WHM to use since it seems to be linked directly to the UNIX users. If this is wrong, please point me in the right direction.

Thanks!

 

Reseller Account?

New accounts are generally owned by the "root" reseller though so if we make him a reseller account with full root access will he be able to modify accounts that are owned by "root" and not himself?