Hi, I have sudo 1.6.8p4. How to config sudoers to allow the heavy-user to run "useradd" but not allow to run "useradd -g or -G root newuser"? This heavy-user may create many other users, but none with root level.