sudo

sudo #

Run command as another user, usually a superuser.

Scope of command can be constrained and made available to normal users.

Can just require the normal users' own credentials.