diff --git a/ansible/roles/tsg-os-provision/tasks/main.yml b/ansible/roles/tsg-os-provision/tasks/main.yml
index 6493bf6d..6e40bf57 100644
--- a/ansible/roles/tsg-os-provision/tasks/main.yml
+++ b/ansible/roles/tsg-os-provision/tasks/main.yml
@@ -164,4 +164,11 @@
   copy:
     src: "{{ role_path }}/files/script/tsg-os-provision.sh"
     dest: /etc/profile.d/
-    mode: 0755
\ No newline at end of file
+    mode: 0755
+
+- name: "add sudo secure_path"
+  lineinfile:
+    path: /etc/sudoers
+    backrefs: yes
+    regexp: "^(.*Defaults    secure_path =.*)$"
+    line: '\1:/opt/tsg/tsg-os-provision'
\ No newline at end of file