ipa/client: Let everybody run the sudo command

Signed-off-by: Nils Philippsen <nils@redhat.com>

roles/ipa/client/tasks/hbac.yml

@@ -33,6 +33,19 @@
   tags:
     - config
 
+- name: "Let everybody run sudo"
+  ipahbacrule:
+    name: "sudo/all"
+    description: "Allow all users to execute the sudo command"
+    state: present
+    ipaadmin_password: "{{ ipa_admin_password }}"
+    hostcategory: "all"
+    usercategory: "all"
+    hbacsvcgroup:
+      - Sudo
+  tags:
+    - config
+
 ## Host-specific rules
 
 # shell access