Sudoers

I have found it makes since to put the admins in the wheel group and create groups for different permissions levels. Similar to roles. It gets complicated even with Nis+ or AD.
Centralized account management is the only way to go. A product I really like is Quest VAS.