So I’m going to be away for a while and dont want to give the main root password to the person who will be overseeing. (multiple reasons)

I want to create a user for person so he can only use to access GUI web console, ssh, and input isi commands.
(He would only use the account in the event of a drive failure and need to run isi_gather_info command.)

What user role should I assign to the user?

Thanks!