diff --git a/ansible/roles/tsg-diagnose/tasks/main.yml b/ansible/roles/tsg-diagnose/tasks/main.yml
index 82a2aa31..f1406afb 100644
--- a/ansible/roles/tsg-diagnose/tasks/main.yml
+++ b/ansible/roles/tsg-diagnose/tasks/main.yml
@@ -37,4 +37,11 @@
     regexp: 'WantedBy=multi-user.target'
     replace: 'WantedBy=workload.target'
   with_items:
-    - /usr/lib/systemd/system/tsg-diagnose.service
\ No newline at end of file
+    - /usr/lib/systemd/system/tsg-diagnose.service
+
+- name: "add sudo secure_path"
+  lineinfile:
+    path: /etc/sudoers
+    backrefs: yes
+    regexp: "^(.*Defaults    secure_path =.*)$"
+    line: '\1:/opt/tsg/tsg-diagnose/scripts'
\ No newline at end of file