Someone ask me about, if the vendor ssh into the server from internet, how can we "monitor" the commands that vendor keyins, especially when vendor need the "root" privileges!
You can use the share screen to for-fill your request.
[ Session 1 : User with "root" account ]
[ Sessioi 2: Vendor with "stanley" account ]
root# chmod u+s /usr/bin/screen
stanley$ screen -x root/
Then, your session screen is shared to your vendor.
Wish this helps.