Users cannot find out which actions require superuser privileges without trial-and-error

Users who are experienced with Apache can intuit which actions will require superuser privileges to complete and will not be surprised by the request for authentication. However, I see two problems here:

1) Users who are not Apache-savvy will not know which features require superuser privileges and may assume that all of them do.

2) Users who do not have superuser privileges may be frustrated by constant requests for authentication and wonder just what they *are* allowed to do.

As a solution, I propose that a glyph or other indication is placed next to operations that do not require superuser privileges; or perhaps a separate tab or interface for changes that can be made by an unprivileged user.