
In both cases, replace DOMAIN with your AD domain’s name. %DOMAIN\\Group\ Name\ With\ Spaces ALL=(ALL) ALL adding the following entry to /etc/sudoers would allow you to give full sudo permissions to an AD group named Group Name With Spaces: If you haven’t used vi previously, I recommend doing some research on vi commands before launching visudo.Īdding the following entry to /etc/sudoers would allow you to give full sudo permissions to an AD group named ITadmins:īecause a number of AD groups have spaces in the names, you’ll need to escape the spaces using backslashes. This application will do a sanity check on your changes to /etc/sudoers before putting them into production.

To edit /etc/sudoers safely, make sure to use the visudo utility. etc/sudoers gives listed users or groups the ability to execute commands while having the privileges of the root user.
ADD SUDOERS HOW TO
To do this, you would need to add an entry to the /etc/sudoers file. Linux Unix How to Add a User to Sudoers Last Updated On Unix and Linux, the superuser account, also known as root, admin, or supervisor, is a special user account capable of making unrestricted, system-wide changes.
This would allow the users in those groups the ability to run some or all commands with root privileges in Terminal without having to give those accounts administrative privileges on the Mac in question. First add the user, run: sudo adduser
A recent discussion on the MacEnterprise list focused around how to give members of Active Directory groups the ability to run commands as root using the sudo command-line utility.
