How to Add a New User to Sudoers on Debian 12, 11, or 10

Adding a user to the sudoers file in Debian is straightforward and enhances system management and security. This guide provides a clear and efficient method for granting users administrative privileges, ensuring they can execute commands with superuser permissions.

• Ease of Management: Quickly and securely grant admin rights to trusted users.
• Enhanced Security: Limit access to administrative commands to prevent unauthorized system changes.
• Flexibility: Customize user permissions for specific administrative tasks.
• Efficiency: Simplify routine tasks by allowing multiple users to manage system operations.

This streamlined approach ensures you maintain control over your system while delegating responsibilities as needed. By following these steps, you will efficiently manage user privileges and keep your Debian system secure.

Let’s dive into the technical steps to add a new user to the sudoers file on Debian.

Change to Root Account

To add a new user with sudo privileges on Debian, first switch to the root account. You created this account and set its password during Debian’s installation.

Use the command:

su

After verifying the root password correctly, the username will show as “root”, showing you’ve switched to the root user.

Output example:

root@debian:/home/joshua# 

Install “sudo” Package If Not Already Installed

If the sudoers file is missing or removed, reinstall the package with this command:

sudo apt install sudo

Create a New User Account

To establish a new user, we utilize the adduser command, accompanied by your desired username. For instance:

sudo adduser <example username>

For instance, to add a user named “josh”:

sudo adduser josh

Once you run this command, Debian initiates the user creation process. Immediately, you’re asked to specify a password. Given the critical nature of passwords in safeguarding accounts, opting for a resilient password is pivotal. Aim for a mix of uppercase letters, lowercase letters, numbers, and symbols. The password serves as the first line of defense against unauthorized access, more so for users with sudo privileges.

Providing Supplementary User Information

After defining a password, Debian seeks additional details about the user—like their full name or contact data. Though not mandatory, supplying this data can benefit systems with multiple users, ensuring clarity on user identities. If you’d instead not share extra information, hit the enter key, and the system will progress to the subsequent prompt.

On completion, confirm your details by pressing “Y” and then enter.

Verifying the User’s Addition

Post creation, verifying that Debian has indeed recorded the new user is prudent. A straightforward method involves the cat command, targeting the /etc/passwd file:

cat /etc/passwd

This command retrieves a list of all system users. Spotting the freshly created user in this list signifies a successful addition.

The /etc/passwd file, a fundamental part of Debian’s structure, catalogues key data about users, encompassing their username, user ID, group ID, home directory, and chosen shell. As a system administrator or a user, understanding the significance of this file can aid in tasks ranging from user authentication to intricate system management. Regularly revisiting and maintaining this file ensures the system’s smooth functionality.

Add a New User To the Sudoers Group

In the next section, having learned how to add a user to the system, you will now learn how to grant the newly added or existing user sudo privileges.

To do this, execute the following command:

sudo usermod -aG sudo <example username>

For illustration purposes, if you’re looking to grant rights to a user named “josh”, you’d key in:

sudo usermod -aG sudo josh

Ensuring that the user has indeed been incorporated into the sudoers group is paramount. You can ascertain this by employing the id command:

id <username>

By replacing <username> with the specific user’s name, the command furnishes details about the user, encapsulating their user ID, group ID, and any additional group affiliations. Notably, if “sudo” appears in the group list, the user is endowed with sudo rights.

For instance, running the command for the user “josh” would appear as follows:

id josh

The anticipated output would be:

uid=1001(josh) gid=1001(josh) groups=1001(josh),27(sudo)

An alternate avenue to grant sudo rights is by deploying the gpasswd command:

gpasswd -a <example username> sudo

Substitute <username> with the desired user’s name. This command integrates users into the sudo group, bestowing them sudo privileges.

For example:

gpasswd -a joshua sudo

The resulting output should be:

adding joshua to group sudo

Confirm New Sudo User

Upon successfully granting sudo privileges, it’s wise to gauge the user’s capabilities. This can be achieved using the su command:

su <example username>

Replace <username> with the name of the user you have accorded sudo access. This action transitions you to the user’s account, enabling you to verify their sudo capabilities.

To illustrate:

su josh

Verify the username by executing the following command: “sudo whoami.”

sudo whoami

After you input the correct sudo user credentials, a confirmation will greet you, highlighting the user’s ability to manage administrative tasks on Debian.

The expected output is:

root

Congratulations, you have successfully added a new user to the sudoers group and granted them elevated privileges on Debian.

Conclusion

To conclude, when you want to add a new user to the sudoers group on Debian, you create the user account, set their password, and grant them sudo access. This process requires you to log into the Debian root account, create the user account, choose a password, add the user to the sudoers group, and verify their sudo access. Be cautious about who you grant sudo access to, as it provides significant control over the system. Only trusted users should receive these privileges to maintain system security.