/etc/sudoers.d/zfs

zfs

# Allow read-only ZoL commands to be called through sudo without a password.

# Cmnd alias specification
Cmnd_Alias RO_ZFS = \
  /sbin/zfs "", /sbin/zfs help *, \
  /sbin/zfs get, /sbin/zfs get *, \
  /sbin/zfs list, /sbin/zfs list *, \
  /sbin/zpool "", /sbin/zpool help *, \
  /sbin/zpool iostat, /sbin/zpool iostat *, \
  /sbin/zpool list, /sbin/zpool list *, \
  /sbin/zpool status, /sbin/zpool status *, \
  /sbin/zpool upgrade, /sbin/zpool upgrade -v

# Allow any user in the zfsusers group to use basic read-only ZFS commands.
%zfsusers ALL=NOPASSWD: RO_ZFS