If you are using JumpCloud with your Active Directory server, leveraging the JumpCloud AD bridge, you may find that sudo/administrator permissions are periodically lost after you set them within JumpCloud. The AD Bridge controls user attributes and membership in JumpCloud via AD security groups, and this is the case for the sudo/admin user setting.
When using the JumpCloud AD Bridge, there are two AD security groups that you use to control behavior in JumpCloud. Both need to be created in the Users OU.
- JumpCloud - any user or group (or group of groups) placed in this group will be sync'd into JumpCloud.
- JumpCloud Admins - any user or group (or group of groups) placed in this group will set sudo/administrator permissions on the user in JumpCloud.
By adding user admins to the "JumpCloud Admins" group, the AD Bridge will automatically set and maintain the sudo permissions on the user from that point forward.