Add an User Initial Settings on CentOS 7  

[1] Add an User "cent" as an example below.
[root@dlp ~]#
useradd cent

[root@dlp ~]#
passwd cent

Changing password for user cent.
New UNIX password:    
# set password

Retype new UNIX password:    
# confirm

passwd: all authentication tokens updated successfully.
[root@dlp ~]#
# logout

[2] Try to switch to a user that was added above.
dlp login:
# input user name

# password

[cent@dlp ~]$
su -
# switch to root

# root password

[root@dlp ~]#    
# just switched to root

[3] Make a user be only a user who can switch to root as an administration user. (it's 'cent' in this example)
[root@dlp ~]#
usermod -aG wheel cent

[root@dlp ~]#
vi /etc/pam.d/su
auth            sufficient
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
# uncomment the following line

auth            required use_uid
auth            substack        system-auth
auth            include         postlogin
account         sufficient uid = 0 use_uid quiet
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         include         postlogin
session         optional
[4] To forward to emails for root user to another user, set like follows. (it's 'cent' in this example)
[root@dlp ~]#
vi /etc/aliases
# Person who should get root's mail
# last line: uncomment and change to a user

[root@dlp ~]#
# reload