Definition
sudo lets an authorized user run a command as another account, often root, without maintaining a permanent root login.
How it works
Authorization follows sudoers policy and may require user authentication. sudo -l displays effective permissions and sudo -u account selects another identity. Being allowed to use sudo does not necessarily grant unrestricted root access.
Real-world example
An administrator can delegate restarting a particular service without granting universal root permissions. The policy must restrict executable paths and, where necessary, allowed arguments to avoid privilege escalation.
Limits and best practices
Edit sudoers using visudo for syntax validation. Avoid broad NOPASSWD rules, record privileged operations and protect scripts and binaries invoked through sudo against modification by unprivileged users.