Solaris now has RBAC - Role Based Access Control
Good idea and looks interesting
Not heterogeous solution, so would not work for us
Here is a writeup from SysAdmin with comments about sudo
PowerBroker by Symark
Commercial product - few more bells & whistles
Not sure how many are truly useful for our environment
Would be BIG BUCKS for 1,000+ workstations!