your system's users have the need to use commands that would otherwise be available only to the root user, but you cannot by policy (and common sense) let them have access through the root account. what is another option to give them controlled access to root-level commands in a safe and predictable manner?