When the ILM policy is created, ES stores the credentials that were used by whatever user created the policy. These credentials are what is used for executing ILM actions.
It sounds like with your current users you can do PUT /_ilm/policy1 with your superuser user (it can even be the same policy body), which will then have permissions to perform any of the ILM actions.