Allowing root access without giving password
I need to have an untrusted admin to make some work on my production machine. I don't want to give him the root password and I would like to oversee everything he does.
Is there a way to connect from my PC to my server, and then share the connection with him, so he can work as a root without having knowing the root password?
You can give him sudo access, then share a screen session and/or run script prior to have him do anything. From he can become root without having to know your root password and you can watch him perform his work AND all his activity is logged.