When using Business Services Discovery to collect inventory data from Azure Linux systems, additional configuration is required to allow passwordless sudo access.

Why this matters

Azure Linux is centrally managed and includes security settings that can block privilege elevation.
Business Services Discovery requires sudo access without:

• A TTY session
• A password prompt

See Configuring SSH privilege elevation for details.

Background

Flexera provides sample configurations for enabling passwordless sudo by modifying the sudoers file.
These assume the sudoers.d directory is empty.

On Azure Linux, this directory includes a file named waagent, created by Azure to manage service accounts.

• The waagent file enforces password prompts for all service accounts.
• Because it’s stored in sudoers.d, it overrides earlier sudoers entries based on lexical order.

To allow the Business Services Discovery account to elevate privileges without a password, its configuration must override the waagent file.