diff --git a/srcpkgs/cinnamon/files/org.cinnamon.settings-users.policy b/srcpkgs/cinnamon/files/org.cinnamon.settings-users.policy
new file mode 100644
index 00000000000..a9e992e1082
--- /dev/null
+++ b/srcpkgs/cinnamon/files/org.cinnamon.settings-users.policy
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC
+ "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
+<policyconfig>
+
+  <action id="org.cinnamon.settings-users">
+    <message>Authentication is required to run the Cinnamon Users and Groups</message>
+    <icon_name>system-users</icon_name>
+    <defaults>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
+      <allow_active>auth_admin</allow_active>
+    </defaults>
+    <annotate key="org.freedesktop.policykit.exec.path">/usr/lib/cinnamon-settings-users/cinnamon-settings-users.py</annotate>
+    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
+  </action>
+
+</policyconfig>
+
diff --git a/srcpkgs/cinnamon/template b/srcpkgs/cinnamon/template
index 6559a2bf63b..9dcf197c33e 100644
--- a/srcpkgs/cinnamon/template
+++ b/srcpkgs/cinnamon/template
@@ -51,6 +51,10 @@ pre_configure() {
 	NOCONFIGURE=1 ./autogen.sh
 }
 
+post_install() {
+	vinstall ${FILESDIR}/org.cinnamon.settings-users.policy 644 usr/share/polkit-1/actions
+}
+
 cinnamon_package() {
 	depends="${_RUNTIMEDEPS}"
 	pkg_install() {