Howto restrict su command to superuser only in Linux

30
su is run a shell with substitute user and group IDs. su is used to become another user during a login session. Invoked without a username, su defaults to becoming the super user. The optional argument – may be used to provide an environment similar to what the user would expect had the user logged in directly.

Link: DebianAdmin