root login

How do I make it so user "root" can not log directly into an AIX server? I want a user to be able to SU to it but not log into it to keep a log

chuser rlogin='false' root

Thanks for your help...