diff --git a/site-cookbooks/kosmos-base/recipes/default.rb b/site-cookbooks/kosmos-base/recipes/default.rb
index 9596670..2c44cc8 100644
--- a/site-cookbooks/kosmos-base/recipes/default.rb
+++ b/site-cookbooks/kosmos-base/recipes/default.rb
@@ -38,8 +38,11 @@ unless node.chef_environment == "development"
     'mail_badpass',
     'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"',
   ]
-  node.override['authorization']['sudo']['passwordless'] = true
-  include_recipe 'sudo'
+  include_recipe "sudo"
+  sudo "sysadmin" do
+    group "sysadmin"
+    nopasswd true
+  end
 
   include_recipe 'kosmos-base::firewall'