According to man su(1): “su is mostly designed for unprivileged users, the recommended solution for privileged users (e.g. scripts executed by root) is to us

According to man su(1): “su is mostly designed for unprivileged users, the recommended solution for privileged users (e.g. scripts executed by root) is to use non-set-user-ID command runuser(1) that does not require authentication and provide separate PAM configuration. If the PAM session is not required at all then the recommend solution is to use command setpriv(1).”