sub super admin??

How difficult would it be to create customizable admin capabilities? For example, I'd like to hire someone to manage my MU network but I don't really want to give this person access to everything.... just as a precaution. Like a super-admin but with limited powers.

What say ye?