Set varying admin levels?

[kalpana]

Is it possible to have varying levels of admin rights?

Such as:

Root - Full admin access
2nd Admin - Cant change root password but can do other things like install apps etc?
Normal users - Possible to restrict certain things like viewing the app store, viewing the sda etc?

Guess Im after some sort of group policy that I can define who does what etc?

Any help appriciated.