diff --git a/accounts-service/com.endlessm.ParentalControls.rules b/accounts-service/com.endlessm.ParentalControls.rules
new file mode 100644
index 0000000..e630bcf
--- /dev/null
+++ b/accounts-service/com.endlessm.ParentalControls.rules
@@ -0,0 +1,33 @@
+/*
+ * Copyright © 2019 Endless Mobile, Inc.
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 2.1 of the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this library; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+ *
+ * Authors:
+ *  - Philip Withnall <withnall@endlessm.com>
+ */
+
+polkit.addRule(function(action, subject) {
+    /* Allow administrators to read parental controls (for any account) without
+     * needing an additional polkit authorisation dialogue. */
+    if ((action.id == "com.endlessm.ParentalControls.AppFilter.ReadOwn" ||
+         action.id == "com.endlessm.ParentalControls.AppFilter.ReadAny") &&
+        subject.active && subject.local &&
+        subject.isInGroup("sudo")) {
+            return polkit.Result.YES;
+    }
+
+    return polkit.Result.NOT_HANDLED;
+});
diff --git a/accounts-service/meson.build b/accounts-service/meson.build
index 6bf4da9..c2b61fe 100644
--- a/accounts-service/meson.build
+++ b/accounts-service/meson.build
@@ -10,4 +10,7 @@ install_data('com.endlessm.ParentalControls.AppFilter.xml',
   install_dir: dbusinterfacesdir)
 meson.add_install_script(meson_make_symlink,
   join_paths(dbusinterfacesdir, 'com.endlessm.ParentalControls.AppFilter.xml'),
-  join_paths(accountsserviceinterfacesdir, 'com.endlessm.ParentalControls.AppFilter.xml'))
\ No newline at end of file
+  join_paths(accountsserviceinterfacesdir, 'com.endlessm.ParentalControls.AppFilter.xml'))
+
+install_data('com.endlessm.ParentalControls.rules',
+  install_dir: join_paths(get_option('datadir'), 'polkit-1', 'rules.d'))
diff --git a/debian/eos-parental-controls-data.install b/debian/eos-parental-controls-data.install
index 72e2d3b..ca3f187 100644
--- a/debian/eos-parental-controls-data.install
+++ b/debian/eos-parental-controls-data.install
@@ -1,3 +1,4 @@
 usr/share/accountsservice/interfaces/com.endlessm.ParentalControls.AppFilter.xml
 usr/share/dbus-1/interfaces/com.endlessm.ParentalControls.AppFilter.xml
-usr/share/polkit-1/actions/com.endlessm.ParentalControls.policy
\ No newline at end of file
+usr/share/polkit-1/actions/com.endlessm.ParentalControls.policy
+usr/share/polkit-1/rules.d/com.endlessm.ParentalControls.rules
\ No newline at end of file