Limited Admin Account

I like create the name of “PowerOnAdmin” account for only power on and login to the server with runing all the services but without any modifying settings and policies.

How can I create and user right permission for this special account?