The su utility requests appropriate user credentials via PAM and switches to that user ID (the default user is the superuser). A shell is then executed.