If you're on Ubuntu, have a look in
Any member of the unix groups
admin can use
pkexec to gain administrative capabilities. The user created during installation of Ubuntu is a member of those groups, as it is the system administrator. If you create a new user that is not member of those groups, it cannot use
man polkit gives you some information about how to configure policy kit.