diff --git a/sudoers/map.jinja b/sudoers/map.jinja
index 96b25fc..cd97539 100644
--- a/sudoers/map.jinja
+++ b/sudoers/map.jinja
@@ -16,11 +16,11 @@
 
 # our plos active directory core groups sudoers permissions, filtered by environment
 {% set ad_group_maps = salt['grains.filter_by']({
-    'default': { 'default': 'ALL = (ALL:ALL) NOPASSWD: SUPPORT' },
+    'default': { 'default': 'ALL = (root) NOPASSWD: SUPPORT' },
     'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
     'dev':     { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
-    'qa':      { 'default': 'ALL = (ALL:ALL) NOPASSWD: SUPPORT',
-                 'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
+    'qa':      { 'default': 'ALL = (root) NOPASSWD: SUPPORT',
+                 'plosqa': 'ALL = (root) NOPASSWD: ALL' },
     },
     grain='environment',
     merge=salt['pillar.get']('group_maps:lookup', None))