root-or-admin-or-authenticate-admin - Overview of the macOS Authorization Right

macOS 10.7

{
  'class' : 'rule',
  'k-of-n' : '1',
  'rule' : [
    'is-root',
    'is-admin',
    'authenticate-admin-30'
  ]
}