diff --git a/perl-script/provision.pl b/perl-script/provision.pl
index 6db75e2..a5ec5bb 100644
--- a/perl-script/provision.pl
+++ b/perl-script/provision.pl
@@ -32,3 +32,5 @@ if( ($admin_un) = `tail /etc/passwd | grep -v "nobody:"` =~ /([^:\n]+):[^:]+:[0-
     die "create a non-root user & set user passsword before running this script."
 }
 
+# grant doas access to admin user
+system("echo 'permit $admin_un' > /etc/doas.conf");