diff --git a/share/oneprovision/ansible/aws.yml b/share/oneprovision/ansible/aws.yml
index 71b2049ae3..b94ec2d9a7 100644
--- a/share/oneprovision/ansible/aws.yml
+++ b/share/oneprovision/ansible/aws.yml
@@ -23,3 +23,4 @@
       frr_iface: 'eth0'
       # Use /16 for the internal management network address
       frr_prefix_length: 16
+    - sudoers-tmp
diff --git a/share/oneprovision/ansible/packet.yml b/share/oneprovision/ansible/packet.yml
index a10d276e27..d6d70447d6 100644
--- a/share/oneprovision/ansible/packet.yml
+++ b/share/oneprovision/ansible/packet.yml
@@ -24,3 +24,4 @@
       frr_iface: 'bond0_0'
       # Use /25 for the internal management network address
       frr_prefix_length: 25
+    - sudoers-tmp
diff --git a/share/oneprovision/ansible/roles/sudoers-tmp/files/centos-opennebula b/share/oneprovision/ansible/roles/sudoers-tmp/files/centos-opennebula
new file mode 120000
index 0000000000..62a225ce3b
--- /dev/null
+++ b/share/oneprovision/ansible/roles/sudoers-tmp/files/centos-opennebula
@@ -0,0 +1 @@
+../../../../../pkgs/sudoers/centos/opennebula
\ No newline at end of file
diff --git a/share/oneprovision/ansible/roles/sudoers-tmp/files/debian-opennebula b/share/oneprovision/ansible/roles/sudoers-tmp/files/debian-opennebula
new file mode 120000
index 0000000000..fb0612ed8c
--- /dev/null
+++ b/share/oneprovision/ansible/roles/sudoers-tmp/files/debian-opennebula
@@ -0,0 +1 @@
+../../../../../pkgs/sudoers/debian/opennebula
\ No newline at end of file
diff --git a/share/oneprovision/ansible/roles/sudoers-tmp/tasks/main.yml b/share/oneprovision/ansible/roles/sudoers-tmp/tasks/main.yml
new file mode 100644
index 0000000000..65691fb1d3
--- /dev/null
+++ b/share/oneprovision/ansible/roles/sudoers-tmp/tasks/main.yml
@@ -0,0 +1,11 @@
+- name: Overwrite opennebula sudoers (debian)
+  copy:
+    src: debian-opennebula
+    dest: /etc/sudoers.d/opennebula
+  when: ansible_os_family == "Debian"
+
+- name: Overwrite opennebula sudoers (redhat)
+  copy:
+    src: centos-opennebula
+    dest: /etc/sudoers.d/opennebula
+  when: ansible_os_family == "RedHat"