[michaelmrose]

> As the sysadmin you can configure some actions to always accept or always deny, if you want

You can do this with sudo too.

[throwawaysysd]

Yes, polkit does have some overlap with sudo. What it has over sudo is a real API, programs can use it to authenticate an IPC request for an action to a privileged daemon while that daemon is running.