Sudo rights for GUI users from AD?

Question

linux

Hello experts, there is a non-trivial task.
Linux machines are added to AD, users log in and work
for the console, set up rights through sudoers with a white list (it seems to work too)
but is it possible to make a sudo white list for the GUI itself? Unfortunately, it is not an option for the user to have full root rights to everything, but it also does not work with normal rights, is there any solution?
OS - Mint/Ubuntu

Answer 1

Solution - policy kit ( polkit)
https://ru.wikipedia.org/wiki/Polkit
https://wiki.archlinux.org/title/Polkit
without AD). First, I added the user to the wheel group - it works, but it's too bold for the user.
But the rule for polkit - just the right time. Now I probably don’t remember where and how it is recorded, but it takes 5 minutes to google.