As I know , in windows system , there are some privilege group which pre-assigned the specific privilege eg . power user , domain user etc, however , in unix / linux , it seems only have root and general user , if we have webadmin , DBA , system administrator , they should have different privilege to do their work , but now we can not grant a specific privilege to each of them , so it is not easy to trace the log when they have error .
I know some vendor have such solution eg. Beyondtrust PowerBroker , but it seems expensive .
Can advise is there any free or less expensive solution to help it ?
eg. We use RHEL server .