Global account with limited access
We'd like to provide accounts with restricted access to the main WHM (non-root and non-wheel) for staff members.
Some members of staff only need to see bandwith and quote reports as well as simple account management (reset passwords, configure mailboxes).
Other staff members need to access disk and run sudoed scripts to setup custom-built software for client accounts.
None of these access need or should have root access.
The context: hosting premium web site sold with hosting & service. The end client usually uses cPanel only to check for traffic and handle emails; everything else is handled by the staff and any interface that could hinder the installed Web site removed from the UI (limited FTP access, no database management).