diff --git a/tasks/sudo.yml b/tasks/sudo.yml
index 3c0dd7c990..dec4ae3aee 100644
--- a/tasks/sudo.yml
+++ b/tasks/sudo.yml
@@ -8,7 +8,7 @@
 #
 - name: setup /etc/sudoers.d/sysadmin-main
   copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/ owner=root group=root mode=0600
-  when: sudoers-main is not defined
+  when: sudoers-main == 'passwd'
   tags:
   - config
 #
diff --git a/vars/global.yml b/vars/global.yml
index 49718f6d0f..a0d992ff77 100644
--- a/vars/global.yml
+++ b/vars/global.yml
@@ -33,3 +33,5 @@ global_pkgs_inst: ['bind-utils', 'mailx', 'nc', 'openssh-clients',
 netapp_iscsi_name: iqn.1992-08.com.netapp:sn.1573980081:vf.6fb258f4-106f-11e2-ae29-00a098161d90
 # iscsi portal for netapp iscsi volume
 netapp_iscsi_portal: 10.5.88.35
+#
+sudoers-main: "passwd"