diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index d98789996c..2bcff80fec 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -54,7 +54,7 @@
     hostcategory: "all"
     usercategory: "all"
     hbacsvcgroup:
-      - Sudo
+      - sudo
   notify: clean sss caches
   no_log: true
   loop: "{{ ipa_servers }}"