# Custom sudo Rules

Custom sudo rules can be specify in hiera as follows:

```yaml
aaa::sudo_rules:
   - 'Defaults:telegraf !requiretty, !syslog'
   - 'telegraf ALL=(root) NOPASSWD: /usr/lib/telegraf/scripts/nxserver_report.sh'
```

Beside that, if `aaa::allow_sudoers_d` is set to `true` (which is the default), you might also simply deploy a file to /etc/sudoers.d e.g. via a technique described in [Distribute Files](distribute_files).