Disallowing sudo user to not able to add user

To allow a sudo user to be able to run commands but not able to add user to the system. Is it possible to do this in Ubuntu? I am assuming its in the sudoer file.

Thanks,
TT