block user to SU

for Solaris

# chown root:admin /usr/bin/su

# chmod 4750 /usr/bin/su

for Linux redhat

# chown root:admin /bin/su

# chmod 4750 /bin/su

SU command for group admin only