diff --git a/roles/domain/tasks/domain_join.yml b/roles/domain/tasks/domain_join.yml
index bec441e..5a03a1f 100644
--- a/roles/domain/tasks/domain_join.yml
+++ b/roles/domain/tasks/domain_join.yml
@@ -1,6 +1,6 @@
 ---
 - name: Permetto ai domadmins di usare sudo
-  template: src=sudoers.d dest=/etc/sudoers.d/domadmins owner=root group=root mode=0440
+  template: src=sudoers.d dest=/etc/sudoers.d/domain owner=root group=root mode=0440 validate="/usr/sbin/visudo -cf %s"
   sudo: yes
 
 - name: verifica join a dominio
diff --git a/roles/domain/templates/sudoers.d b/roles/domain/templates/sudoers.d
index 22fec5b..269d813 100644
--- a/roles/domain/templates/sudoers.d
+++ b/roles/domain/templates/sudoers.d
@@ -2,3 +2,5 @@
 # Autorizzazione per gli utenti di dominio
 %domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL
 %{{ domainshort }}\\domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL
+%domain\ operators ALL=(ALL:ALL) ALL
+%{{ domainshort }}\\domain\ operators ALL=(ALL:ALL) ALL