diff --git a/data/etc/sudoers.d/plinth b/data/etc/sudoers.d/plinth
index aaefc5e62..473da750a 100644
--- a/data/etc/sudoers.d/plinth
+++ b/data/etc/sudoers.d/plinth
@@ -1 +1,11 @@
+#
+# Allow plinth user to run plinth action scripts with superuser privileges
+# without needing a password.
+#
 plinth    ALL=(ALL:ALL) NOPASSWD:/usr/share/plinth/actions/*
+
+#
+# On FreedomBox, allow all users in the 'admin' LDAP group to execute
+# commands as root.
+#
+%admin ALL=(root) ALL