How To Add User to Sudoers & Add User to Sudo Group on CentOS 7

If you're new to CentOS 7, one of the first things you'll want to do is learn how to add users to the sudoers file and the sudo group. This will give them elevated privileges and allow them to run commands with root-level permissions. In this article, we'll walk you through the process step-by-step.

What is Sudo?

Before we get started, let's talk about what sudo is and why it's important. Sudo stands for "superuser do" and is a command that allows users to perform tasks with administrative permissions. By default, only the root user has these permissions on CentOS 7, but using sudo, we can grant certain users the ability to perform administrative tasks as well.

What is the Sudoers File?

The sudoers file is a configuration file that controls who has access to sudo and what they're allowed to do. It's located at /etc/sudoers and is edited using the visudo command. When editing the sudoers file, it's important to be careful and make sure you don't make any mistakes. A typo or syntax error can render the file unusable, which could cause serious problems.

Adding a User to the Sudo Group

The easiest way to give a user sudo permissions is by adding them to the wheel group (CentOS 7's default sudo group). Here's how to do it

Step 1: Log in as Root

To add a user to the sudo group, you'll need to be logged in as the root user. If you're not already logged in as root, you can switch to the root user by typing:

su -

Step 2: Add the User to the Wheel Group

To add a user to the wheel group, you'll use the usermod command. Here's the syntax

usermod -aG wheel username

Replace "username" with the name of the user you want to add to the wheel group. The -a flag tells usermod to append the user to the group instead of replacing any existing group memberships.

Example

usermod -aG wheel john

This command adds the user "john" to the wheel group.

Step 3: Verify the User's Sudo Access

To verify that the user has sudo access, you can switch to their account and try running a command with sudo:

su - john
sudo whoami

This should prompt you for the user's password, and then return "root" if everything is working correctly.

Adding a User to the Sudoers File

If you need more granular control or don't want to use the wheel group, you can add users to the sudoers file directly. Here's how to do it

Step 1: Edit the Sudoers File

To edit the sudoers file safely, use the visudo command. This command opens the sudoers file in a text editor and checks the syntax for errors before saving the changes:

visudo

Step 2: Add User Entry

To add a user to the sudoers file, add a line in the following format:

username  ALL=(ALL)  ALL

Replace "username" with the name of the user you want to add. This line grants the user permission to run any command with sudo on any host.

Example

john  ALL=(ALL)  ALL

This line grants the user "john" permission to run any command with sudo.

Step 3: Save the Changes

When you're done editing the sudoers file, save your changes and exit the text editor. If you're using nano, press Ctrl+O to save and Ctrl+X to exit. If you're using vim, type :wq and press Enter.

Common Sudo Configurations

Here are some useful sudo configurations you can add to the sudoers file:

Troubleshooting

If you're having trouble adding a user to the sudo group or sudoers file, here are a few things to check

Verify Root Access

Make sure you're logged in as the root user. You need root privileges to make changes to the sudoers file or add users to the wheel group.

Check Sudoers File Syntax

The sudoers file has strict syntax requirements. Always use visudo to edit it, as it validates syntax before saving:

visudo -c

Verify File Permissions

The sudoers file should have permissions 440 (read-only for owner and group). Fix permissions if needed:

chmod 440 /etc/sudoers

Best Practices

• Limit sudo access Only grant sudo privileges to users who truly need them for their job responsibilities.

• Use groups Instead of adding individual users, create groups with specific permissions and add users to those groups.

• Avoid NOPASSWD Use password-free sudo sparingly, as it can be a security risk if accounts are compromised.

• Regular audits Periodically review sudo access and remove unnecessary privileges.

• Strong passwords Ensure users with sudo access have strong, unique passwords.

Conclusion

Adding users to the sudoers file or wheel group is essential for proper system administration on CentOS 7. The wheel group method is simpler and recommended for most users, while direct sudoers file editing provides more granular control. Always use visudo when editing the sudoers file to prevent syntax errors that could lock you out of administrative access.