diff --git a/templates/usermanagement/sudoers.d/sudoers.j2 b/templates/usermanagement/sudoers.d/sudoers.j2
index 1022a09..3b8659d 100644
--- a/templates/usermanagement/sudoers.d/sudoers.j2
+++ b/templates/usermanagement/sudoers.d/sudoers.j2
@@ -4,6 +4,7 @@ drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible *
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible/roles/common *
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy *
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook *
+drone ansible.siempie.internal=(root) NOPASSWD:SETENV:/usr/bin/sh *
 {% endif %}
 {% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %}
 drone mgmt01.siempie.internal=(simon) NOPASSWD:/usr/local/bin/kubectl *