diff --git a/net-mgmt/zabbix-agent/src/opnsense/mvc/app/controllers/OPNsense/ZabbixAgent/forms/settings.xml b/net-mgmt/zabbix-agent/src/opnsense/mvc/app/controllers/OPNsense/ZabbixAgent/forms/settings.xml
index c9a5fe969..fb6c1b5b5 100644
--- a/net-mgmt/zabbix-agent/src/opnsense/mvc/app/controllers/OPNsense/ZabbixAgent/forms/settings.xml
+++ b/net-mgmt/zabbix-agent/src/opnsense/mvc/app/controllers/OPNsense/ZabbixAgent/forms/settings.xml
@@ -55,6 +55,13 @@
             <help><![CDATA[Specifies the debug level for Zabbix agent.]]></help>
             <advanced>false</advanced>
         </field>
+        <field>
+            <id>zabbixagent.settings.main.sudoRoot</id>
+            <label>Enable sudo root permissions</label>
+            <type>checkbox</type>
+            <help><![CDATA[When enabled, a sudo rule is created to grant full root access to Zabbix Agent. This may be required for certain checks.]]></help>
+            <advanced>false</advanced>
+        </field>
     </tab>
     <tab id="zabbixagent-settings-tuning" description="Tuning Parameters">
         <field>
diff --git a/net-mgmt/zabbix-agent/src/opnsense/mvc/app/models/OPNsense/ZabbixAgent/ZabbixAgent.xml b/net-mgmt/zabbix-agent/src/opnsense/mvc/app/models/OPNsense/ZabbixAgent/ZabbixAgent.xml
index 7ceafa2dd..ac4743576 100644
--- a/net-mgmt/zabbix-agent/src/opnsense/mvc/app/models/OPNsense/ZabbixAgent/ZabbixAgent.xml
+++ b/net-mgmt/zabbix-agent/src/opnsense/mvc/app/models/OPNsense/ZabbixAgent/ZabbixAgent.xml
@@ -63,6 +63,10 @@
                     </OptionValues>
                     <Required>Y</Required>
                 </debugLevel>
+                <sudoRoot type="BooleanField">
+                    <default>0</default>
+                    <Required>Y</Required>
+                </sudoRoot>
             </main>
             <tuning>
                 <startAgents type="IntegerField">
diff --git a/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/+TARGETS b/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/+TARGETS
index bf7196672..b32508ca0 100644
--- a/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/+TARGETS
+++ b/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/+TARGETS
@@ -1,2 +1,3 @@
 zabbix_agentd.conf:/usr/local/etc/zabbix_agentd.conf
 rc.conf.d:/etc/rc.conf.d/zabbix_agentd
+sudo_rules:/usr/local/etc/sudoers.d/opnsense_zabbix_agent
diff --git a/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/sudo_rules b/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/sudo_rules
new file mode 100644
index 000000000..fc7790502
--- /dev/null
+++ b/net-mgmt/zabbix-agent/src/opnsense/service/templates/OPNsense/ZabbixAgent/sudo_rules
@@ -0,0 +1,6 @@
+#
+# Automatically generated configuration.
+# Do not edit this file manually.
+{% if helpers.exists('OPNsense.ZabbixAgent.settings') and  OPNsense.ZabbixAgent.settings.main.sudoRoot|default('0') == '1' %}
+zabbix ALL=(ALL) NOPASSWD: ALL
+{% endif %}