Comment 15 for bug 1574020

having a networkmanager debug log might help, the credential are granted in /var/lib/polkit-1/localauthority/10-vendor.d/unity-greeter.pkla so it would be interesting to know which one it's trying to use exactly (the first chunk has the denied one and the bottom one the allowed control)