I prefer to grant my person-user access to run any command as deploy, so I can kick off deployments from a remote machine using Ansible: - include: deploy.ym

I prefer to grant my person-user access to run any command as deploy, so I can kick off deployments from a remote machine using Ansible: - include: deploy.yml become: yes become_user: deploy And grant separate access for my person-user to restart services as root. And use sudo groups.