---
updatedAt: 2026-07-16T20:37:40.000Z
---

# Configure sudoers file | AD Bridge

### Configure entries in your sudoers files

When you add Active Directory entries to your **sudoers** file, typically **/etc/sudoers**, you must follow these rules:

* ALL must be in uppercase letters.
* Use a slash character to escape the slash that separates the Active Directory domain from the user or group name.
* Use the correct case; entries are case sensitive.
* Use a user or group alias if the user or group has one in Active Directory.
* If the user or group does not have an alias, you must set the user or group in the AD Bridge canonical name format of **NetBIOSdomainName\sAMAccountName** (and escape the slash character).
* The user or group must to be enabled in the Active Directory cell.

For users or groups with an alias, the AD Bridge canonical name format is the alias, which you must use. You cannot use the format of **NetBIOS domain name\SAM account name**.

For users and groups without an alias, the form of an entry in the **sudoers** file is as follows:

```
DOMAIN\\username
DOMAIN\\groupname
```

> ✅ **Example**
>
> Example entry of a group.
>
> ```
> %EXAMPLE\\LinuxFullAdmins ALL=(ALL) ALL
> ```
>
> ```
> kyle ALL=(ALL) ALL
> ```

> ℹ️
>
> For more information about how to format your **sudoers** file, see your computer's **man** page for sudo.