Audit trails

[kabal]

I have about 5 Zimbra adminstrators that run commands on the Zimbra server.
Unfortunately, all zimbra admins have to run zmprov and other related commands as zimbra user.
My control users are seething over this because they say there's no way of determining who ran what command.

My request is, is there a way of running zmprov commands as a seperate user (aside from Zimbra). eg. let linux user kbola be able to run zmcontrol stop, zmprov ca ... etc.

If there is any other advice that can be given from a security and audit point of view, it would be welcome.

Thank you

[uxbod]

Why not control access to the zimbra account by using sudo ?