# sudo privilege's are not working

**URL:** <https://forum.ansible.com/t/sudo-privileges-are-not-working/36732>\
**Category:** Ansible Project\
**Created:** [June 14, 2022, 7:16am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732 "2022-06-14T07:16:27Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shivakumar\_Venkatasw](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@Shivakumar\_Venkatasw](https://forum.ansible.com/u/Shivakumar_Venkatasw)\
**Post date:** [June 14, 2022, 7:16am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/1 "2022-06-14T07:16:27Z")

</div>

Hi team,  
look at my playbook

---

<div class="post-metadata">

**Author:** ![racke](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/racke/32/4767_2.png) [@racke](https://forum.ansible.com/u/racke)\
**Post date:** [June 14, 2022, 7:46am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/2 "2022-06-14T07:46:26Z")

</div>

> Hi team,  
> look at my playbook  
> ---  
> - hosts: all  
> become: true  
> become\_user: ansible  
> tasks:  
> - name: add a user to the list of AllowUsers if not present  
> vars:  
> usernames:  
> - shivakumar.venkataswamy  
> - karthik.reddy  
> - aman.saxena  
> lineinfile:  
> path: /etc/ssh/sshd\_config  
> backrefs: yes  
> backup: yes  
> state: absent  
> regexp: '^AllowUsers((?:(?:\s+\S+(?!\S))(?\<!\s{{ usernames }}))+\s\*?)(\n?)$'  
> line: 'AllowUsers\1 shivakumar.venkataswamy karthik.reddy aman.saxena\2'  
> validate: /usr/sbin/sshd -t -f %s

Permission denied: '/etc/ssh/sshd\_config'

The ansible user can't edit the file, so try "become\_user: root" in your task.

Regards  
Racke

---

<div class="post-metadata">

**Author:** ![Shivakumar\_Venkatasw](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@Shivakumar\_Venkatasw](https://forum.ansible.com/u/Shivakumar_Venkatasw)\
**Post date:** [June 14, 2022, 8:21am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/3 "2022-06-14T08:21:14Z")

</div>

ansible is user account we created and member of sudor’s ( /etc/sudoers) with full privileges’ same as root.

---

<div class="post-metadata">

**Author:** ![skratbag](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/skratbag/32/4836_2.png) [@skratbag](https://forum.ansible.com/u/skratbag)\
**Post date:** [June 14, 2022, 8:39am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/4 "2022-06-14T08:39:08Z")

</div>

Hi,

Does the user “ansible” have write permissions on /etc/ssh/sshd\_config?

Regards

David

When in trouble, or in doubt

Run in circles, scream and shout

---

<div class="post-metadata">

**Author:** ![racke](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/racke/32/4767_2.png) [@racke](https://forum.ansible.com/u/racke)\
**Post date:** [June 14, 2022, 8:44am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/5 "2022-06-14T08:44:03Z")

</div>

> ansible is user account we created and member of sudor's ( /etc/sudoers) with full privileges' same as root.

IMHO the privileges are only the same when using the "sudo" command.

Regards

```
           Racke

```

---

<div class="post-metadata">

**Author:** ![Shivakumar\_Venkatasw](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@Shivakumar\_Venkatasw](https://forum.ansible.com/u/Shivakumar_Venkatasw)\
**Post date:** [June 14, 2022, 10:20am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/6 "2022-06-14T10:20:05Z")

</div>

what is mean by IMHO

how can i execute all commands through playbook by a normal user with root access.

---

<div class="post-metadata">

**Author:** ![Shivakumar\_Venkatasw](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@Shivakumar\_Venkatasw](https://forum.ansible.com/u/Shivakumar_Venkatasw)\
**Post date:** [June 14, 2022, 10:32am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/7 "2022-06-14T10:32:43Z")

</div>

Hi team ,  
can we connect through google meet or zoom  
it giving more trouble to me… i hope you guy’s easily catch up that…

Regards,  
shivu

---

<div class="post-metadata">

**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\
**Post date:** [June 14, 2022, 11:27am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/8 "2022-06-14T11:27:39Z")

</div>

> what is mean by IMHO
> 
> how can i execute all commands through playbook by a normal user with root access.

You don’t seem to understand the concept of privilege escalation.  
Hopefully this will enough to help you:

[https://docs.ansible.com/ansible/latest/user\_guide/become.html](https://docs.ansible.com/ansible/latest/user_guide/become.html)

---

<div class="post-metadata">

**Author:** ![S\_Bauer-Lee](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@S\_Bauer-Lee](https://forum.ansible.com/u/S_Bauer-Lee)\
**Post date:** [June 14, 2022, 11:57am UTC](https://forum.ansible.com/t/sudo-privileges-are-not-working/36732/9 "2022-06-14T11:57:24Z")

</div>

The user ‘ansible’ runs the playbook,. The user ‘ansible’ has sudo privilege as 'root ’  
In the playbook, the 'become user ’ is ‘root’

Read the docs pertaining to sudo.  
Ansible doesn’t use it directly.