How to Add a User to Sudoers in Ubuntu

1Add User to the sudo Group (Easiest Way)

To add user to sudoers Ubuntu the easiest way, you can place the user into the built-in sudo group using a simple terminal command. This grants them full administrator rights to install software and manage system files without needing to create custom configuration rules from scratch.

Step 1: Open the terminal.

Step 2: Run this command, replacing username with the actual user’s name:

sudo usermod -aG sudo username

Step 3: The target account requires a logout and login cycle to apply the change. Alternatively, start a new login shell (a command-line session) to refresh permissions:

su - username

Check the User’s Groups

To confirm membership within the sudo group, execute this command:

groups username

The target user's name appears in the resulting output.

Test sudo Access

Switch to the target account and execute:

sudo whoami

A password prompt followed by root output confirms operational sudo privileges.

2Give User Custom sudo Permissions (Using sudoers File)

Custom command restrictions require editing the /etc/sudoers file directly. Manual file modification manages precise execution boundaries.

This utility checks syntax mistakes prior to saving, preventing broken configurations.

Open sudoers File Safely

You open the sudoers file safely in Ubuntu by running the visudo command in your terminal rather than opening the file in a standard text editor. This built-in tool checks your syntax for errors before saving, which prevents you from accidentally locking yourself out of administrator access.

sudo visudo

This command launches the sudoers configuration inside the default editor.

Preference for the nano text editor requires a specific command execution:

Granting full sudo access allows execution of any command with administrator rights. Sudo permissions derive from rules added to the special 'sudoers' file for targeted accounts. Executing the 'sudo' command enables powerful system actions once configuration completes.

The target account gains the ability to execute any command as the superuser via the `sudo` command. System authentication prompts for password verification during command execution as a core security measure.

Allow User to Run sudo Without Password

You allow a user to run sudo without a password in Ubuntu by adding a specific rule to the /etc/sudoers configuration file. This setup lets the user run administrative commands immediately without typing their password every time, though it reduces your system security.

Reserve this permission exclusively for automated tasks like scripts running on Ubuntu 22.04.

username ALL=(ALL:ALL) NOPASSWD: /bin/mkdir, /bin/rmdir

Alternatively, enforcing password requirements for targeted utilities like apt and systemctl involves specific rules:

The `/etc/sudoers.d` folder in Ubuntu manages user permissions for running commands as administrator. Separate configuration files created inside `/etc/sudoers.d` replace direct edits to the main `/etc/sudoers` file. This structural method groups permissions, clarifying individual user capabilities.

To create a dedicated user file, run:

sudo visudo -f /etc/sudoers.d/username

Appending custom rules requires syntax matching this example:

username ALL=(ALL:ALL) NOPASSWD:ALL

Tip: File names must exclude dots (.) and trailing tildes (~) to prevent system omission.

See What sudo Permissions a User Has

To audit permitted commands for a specific user, run this command:

sudo -l -U username

Output displays permitted and restricted commands for the audited account.

Summary

• Easy method: Add users to the sudo group to give full sudo access.
• Control access: Edit the sudoers file or add files in /etc/sudoers.d for custom permissions.
• Always use visudo: It prevents mistakes that could lock you out.
• Be careful with passwordless sudo: It can make your system less safe.
• Check sudo permissions regularly: Use sudo -l -U username to verify.

Managing sudo permissions in Ubuntu involves adding users to the sudo group for quick administrative access or editing the sudoers file for custom rules. Always use visudo to prevent syntax mistakes, keep passwordless access to a minimum, and check user permissions regularly with the command line.