Sounds like what's needed is a "Security" user designation. This could be a non-medical person, so the system will let them do some things particular to system admin but not some other things.
Wayne New York, NY Hey, look! A Bandwagon! Let's jump on!