diff --git a/bifrost/cli.py b/bifrost/cli.py
index e204a5ccb..f43a9b111 100644
--- a/bifrost/cli.py
+++ b/bifrost/cli.py
@@ -242,8 +242,7 @@ def check_for_root():
             '[ $(whoami) == root ] || sudo --non-interactive true',
             shell=True, stderr=subprocess.DEVNULL)
     except subprocess.CalledProcessError:
-        # TODO(dtantsur): tell ansible to ask for password
-        sys.exit('Sudo without password is required for Bifrost')
+        COMMON_PARAMS.append('--ask-become-pass')
 
 
 def main():