Your opening line can easily be interpreted as stating that the stock 22.04 server install has an account with this privilege: > The scenario is this: a brand

Your opening line can easily be interpreted as stating that the stock 22.04 server install has an account with this privilege: > The scenario is this: a brand new Ubuntu 22.04 server has an account which is restricted to running sudo logrotate . It might have been better to say: > The scenario is this: take a brand new Ubuntu 22.04 server and create an account which is restricted to running sudo logrotate .