Limited root access

I have a rather unique situation that I need to come up with a solution for. We have servers by which a remote team requires having root access to our servers to perform certain jobs. We need to still allow them root access, but deny them from the ability to use iptables, visudo & passwd.

We are going to force them to not be able to login as root any longer and to login with user accounts that have all root functionality except for the above mentioned functions.

Can someone describe to me what I would need to do to accommodate this?

Thanks.

would not that be the job of sudo? or you can look into jail or restricted/limited shell if sudo is not what you can use.

Check more discussion of this question.

Related posts:

1. How to give user root access without giving him root password
2. Allow non root access to /root folder
3. Putty: ssh root login to server disabled, how i can setup passwordless access to root on server?
4. Root access amazon ec2
5. Make nginx be able to access all web files when not running as root