As we know Linux provides much better security. You can set user management policy and user permissions so normal users can't authenticate the critical system processes. If you want your other users can perform such actions, you will need to use su or sudo commands.

What is 'su'?

For the Linux system, su will force you to share your root password with another user.

What is ‘sudo’?

In Linux, sudo is a root binary setuid. It can run the root commands for authorized users. Whenever users run the sudo, they will need to type their own password to execute the command.

To add or remove the list of sudo users, you can run the below command

# sudo /usr/sbin/visudo

By default, sudo string will be looked as below.

# root ALL=(ALL) ALL

How to grant sudo access

It is very dangerous to grant ALL=(ALL) ALL permission to users except you know that listed users.

root ALL=(ALL:ALL) ALL
admin ALL=(ALL:ALL) ALL 

Instead of that, you can configure your sudo user more precisely by providing the limited command permission. For that, you can use the below line.

User_name Machine_name=(Effective_user) command 

The following are all divided parts of the above line.

• User_name: Name of sudo user.
• Machine_name:  Hostname of the server.
• (Effective_user) :  Users which are allowed to execute commands.
• command:  Commands or set of commands which can sudo users perform.