Howdy,
I’ve been trying to figure this out for a couple of days now. Essentially I am setting up a loaner laptop that uses active directory. This laptop is using Linux mint 22.3. I want users to be able to install apps, but only from the the gui software manager and apt install in the terminal. I don’t want the other users to have any other sudo privileges. I managed to configure it to allow a non admin user from within the domain to use apt in the terminal to install packages, but for some reason it doesn’t let me do it in the gui software manager without the root password.
I used visudo to edit the sudoers folder. I tried different varations of this line: %domain\ users@MY-Domain.com ALL=(ALL:ALL) /usr/bin/apt-get, /usr/bin/apt, /usr/bin/mintinstall, /usr/share/software-manager
Any help on this would be greatly appreciated.


Would flatpaks work for your purposes? It would allow users to install applications, but not mess with anything important.
I did that with my kids laptop on OpenSUSE, added him to the flatpak group and installed flathub as a user instead of system using the --user flag. He can install applications to his hearts desire, but they won’t mess with the system