authenticate-session-owner-or-admin - Overview of the macOS Authorization Right

macOS 10.9 / 10.10 / 10.11 / 10.12 / 10.13 / 10.14

{
  'allow-root' : 'false',
  'authenticate-user' : 'true',
  'class' : 'user',
  'comment' : 'Authenticate either as the owner or as an administrator.',
  'group' : 'admin',
  'session-owner' : 'true',
  'shared' : 'false',
  'timeout' : '2147483647',
  'tries' : '10000'
}

macOS 10.6 / 10.7 / 10.8

{
  'allow-root' : 'false',
  'class' : 'user',
  'comment' : 'Authenticate either as the owner or as an administrator.',
  'group' : 'admin',
  'session-owner' : 'true',
  'shared' : 'false'
}