Delegating administrator authority

one way to run commands as root is using su - to start a new shell
su is all or nothing
sudo is finer-grained, prevents compromise of root password
as root: visudo
%wheel ALL=(ALL) NOPASSWD: ALL
%users localhost=/usr/bin/eject
GROUP MACHINE (WHO TO RUN AS) [OPTION]:COMMANDS