# ANSIBLE PERMISSIONS

**URL:** <https://forum.ansible.com/t/ansible-permissions/29054>\
**Category:** Ansible Project\
**Created:** [November 16, 2018, 7:54pm UTC](https://forum.ansible.com/t/ansible-permissions/29054 "2018-11-16T19:54:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fahad.riaz1718](https://avatars.discourse-cdn.com/v4/letter/f/7993a0/32.png) [@fahad.riaz1718](https://forum.ansible.com/u/fahad.riaz1718)\
**Post date:** [November 16, 2018, 7:54pm UTC](https://forum.ansible.com/t/ansible-permissions/29054/1 "2018-11-16T19:54:14Z")

</div>

I wrote a playbook that allows a local user to use ansible “LINEINFILE” module to edit /etc/sssd/sssd.conf and /etc/fstab. However I gave that local user to run all sudo commands without password.

I want to limit the local user and only give specific permissions in the /etc/sudoers file. . I want to know what LINUX command is actually being used when we run LINEINFILE OR INSERTALINEINFILE ansible module.

an example of my playbook is as follows.

- name: Editing sssd.conf file  
lineinfile:  
path: /etc/sssd/sssd.conf  
line: sudo\_provider = ldap

Thank You!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [November 16, 2018, 8:00pm UTC](https://forum.ansible.com/t/ansible-permissions/29054/2 "2018-11-16T20:00:51Z")

</div>

Not all modules are wrappers to shell commands, specifically this  
module is not using any commands, its using python code and system  
calls, which you cannot create sudo entries for.