Comment # 2 on bug 1204114 from Michal Suchanek

It says which operation is checked but not what privileges are needed.

Oct 09 11:43:43 naga NetworkManager[10582]: <trace> [1665308623.6281] auth:
call[46]: CheckAuthorization(org.freedesktop.NetworkManager.set
tings.modify.system), subject=unix-process[pid=11013, uid=1000,
start=102403016]
Oct 09 11:43:43 naga NetworkManager[10582]: <trace> [1665308623.6348] auth:
call[46]: completed: authorized=0, challenge=1
Oct 09 11:44:06 naga NetworkManager[10582]: <trace> [1665308646.9554] auth:
call[47]: CheckAuthorization(org.freedesktop.NetworkManager.set
tings.modify.system), subject=unix-process[pid=11013, uid=1000,
start=102403016]
Oct 09 11:44:06 naga NetworkManager[10582]: <trace> [1665308646.9602] auth:
call[47]: completed: authorized=0, challenge=1
Oct 09 11:44:06 naga NetworkManager[10582]: <info>  [1665308646.9604] audit:
op="connection-update" uuid="24996e10-e7ab-4e0d-abed-72ccc8364
160" name="VPN PRV2" pid=11013 uid=1000 result="fail" reason="Insufficient
privileges"

There are others that are authorized:

Oct 09 11:42:28 naga NetworkManager[10582]: <trace> [1665308548.1561] auth:
call[3]: CheckAuthorization(org.freedesktop.NetworkManager.chec
kpoint-rollback), subject=unix-process[pid=2698, uid=1000, start=5803]
Oct 09 11:42:28 naga NetworkManager[10582]: <trace> [1665308548.1563] auth:
call[4]: CheckAuthorization(org.freedesktop.NetworkManager.enab
le-disable-connectivity-check), subject=unix-process[pid=2698, uid=1000,
start=5803]
Oct 09 11:42:28 naga NetworkManager[10582]: <trace> [1665308548.3626] auth:
call[3]: completed: authorized=0, challenge=1
Oct 09 11:42:28 naga NetworkManager[10582]: <trace> [1665308548.3653] auth:
call[4]: completed: authorized=1, challenge=0

This is the authenticator initialization:

Oct 09 11:42:27 naga NetworkManager[10582]: <debug> [1665308547.2926]
auth[0x561a90727d20]: create auth-manager: polkit enabled
Oct 09 11:42:27 naga NetworkManager[10582]: <debug> [1665308547.2926]
auth[0x561a90727d20]: set instance
Oct 09 11:42:27 naga NetworkManager[10582]: <debug> [1665308547.2926] setup
NMAuthManager singleton (7a7275590f589891)
Oct 09 11:42:28 naga NetworkManager[10582]: <trace> [1665308548.0863] auth:
name-owner: polkit is running (now :1.1)