sudo visudo # always use visudo to edit!
# Allow alice to run any command
alice ALL=(ALL:ALL) ALL
# Allow without password
alice ALL=(ALL) NOPASSWD: ALL
# Allow only specific commands
alice ALL=(ALL) /usr/bin/systemctl restart nginx,
/usr/bin/systemctl status nginx