howto delegate user administration to non-root account?

[Gebhardt Thomas <gebhardt@hrz.uni-marburg.de>]

Hi,

it is possible to delegate the adding and removing of users to a
non-root account without getting too much security hassle?
(no alteration of system accounts possible, ...)

If so, is there an easy established/preferred/canonical way to do this?

Thanks, Thomas