diff --git a/kyra/security/polkit.nix b/kyra/security/polkit.nix
new file mode 100644
index 0000000..77e04d1
--- /dev/null
+++ b/kyra/security/polkit.nix
@@ -0,0 +1,10 @@
+_: {
+  security = {
+    polkit = {
+      enable = true;
+      adminIdentities = [
+        "unix-group:wheel"
+      ];
+    };
+  };
+}