Yeh - the MAAS user needs a bunch of SUDO access. I have these root@region:/etc/sudoers.d# pwd /etc/sudoers.d root@region:/etc/sudoers.d# ls -1 | grep maas 10_maas_rack 10_maas_restart_bind9 10_maas_restart_maas-dhcpd 10_maas_restart_maas-dhcpd6 10_maas_restart_maas_proxy 10_maas_restart_ntp 10_maas_restart_tgt 10_maas_start_bind9 10_maas_start_maas-dhcpd 10_maas_start_maas-dhcpd6 10_maas_start_maas_proxy 10_maas_start_ntp 10_maas_start_tgt 10_maas_status_bind9 10_maas_status_maas-dhcpd 10_maas_status_maas-dhcpd6 10_maas_status_maas_proxy 10_maas_status_ntp 10_maas_status_tgt 10_maas_stop_bind9 10_maas_stop_maas-dhcpd 10_maas_stop_maas-dhcpd6 10_maas_stop_maas_proxy 10_maas_stop_ntp 10_maas_stop_tgt root@region:/etc/sudoers.d# and each one looks a bit like this root@region:/etc/sudoers.d# cat 10_maas_restart_bind9 maas ALL= NOPASSWD: /bin/systemctl restart bind9 Regards Pete > On 13 Feb 2017, at 15:46, Jim Tilander