diff --git a/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml b/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml
index 4b961ec..03a3ab2 100644
--- a/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml
+++ b/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml
@@ -205,6 +205,22 @@
   notify: restart nslcd      
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
+#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+# configure sudo for sysadmin group
+# add sysadmin group to sudoers
+- name: Add sysadmin group to sudoers
+  file:
+    path: /etc/sudoers.d/vn
+    state: touch
+    mode: u=rw,g=r,o=r
+
+# add a line to /etc/sudoers.d/vn file
+- name: add a line to /etc/sudoers.d/vn file
+  lineinfile:
+    path: "/etc/sudoers.d/vn"
+    line: "%sysadmin  ALL=(ALL) NOPASSWD: ALL"
+#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 # Proteger grub
 - name: GRUB se password boot protection