diff --git a/playbooks/awx.yml b/playbooks/awx.yml
new file mode 100644
index 0000000..a4c9198
--- /dev/null
+++ b/playbooks/awx.yml
@@ -0,0 +1,6 @@
+- hosts: all
+  gather_facts: no
+  tasks:
+  - name: Configure AWX user
+    import_role:
+      name: awx
diff --git a/roles/debian-base/tasks/sudoers.yml b/roles/debian-base/tasks/sudoers.yml
index e31f0eb..3c7f69e 100644
--- a/roles/debian-base/tasks/sudoers.yml
+++ b/roles/debian-base/tasks/sudoers.yml
@@ -6,6 +6,6 @@
   copy:
     src: sudoers
     dest: /etc/sudoers.d/vn
-    mode: u=rw,g=r
+    mode: u=rw,g=r,o=
     owner: root
     group: root