[sudo-users] useradd x sudo

[Todd C. Miller]

In message <41AB309D.4050101 at fes.br>
	so spake Edilmar Alves - Lista (edilista):

> How to config sudoers to allow the heavy-user to run "useradd" but not 
> allow to run "useradd -g or -G root newuser"? This heavy-user may create 
> many other users, but none with root level.

Your only real option is to write a wrapper script that parses the
arguments and disallows things you don't want.  Then you can give
users sudo access to that.

 - todd