diff --git a/policies/tenant-admins.policy.hcl b/policies/tenant-admins.policy.hcl
index 72698d6..9aeeaa9 100644
--- a/policies/tenant-admins.policy.hcl
+++ b/policies/tenant-admins.policy.hcl
@@ -7,7 +7,7 @@ path "sys/mounts/${tenant_prefix}/*" {
 }
 
 path "sys/remount" {
-  capabilities = ["update"]
+  capabilities = ["update", "sudo"]
   allowed_parameters = {
     "from" = ["${tenant_prefix}/*"]
     "to" = ["${tenant_prefix}/*"]