diff --git a/roles/pfsense_upgrade/tasks/update_check.yml b/roles/pfsense_upgrade/tasks/update_check.yml
index caa0e48..dd8b7b5 100644
--- a/roles/pfsense_upgrade/tasks/update_check.yml
+++ b/roles/pfsense_upgrade/tasks/update_check.yml
@@ -7,7 +7,7 @@
 # 1. Refresh the local pkg repository metadata
 # ---------------------------------------------------------------------------
 - name: Update pkg repository metadata
-  ansible.builtin.raw: pkg update -f 2>&1
+  ansible.builtin.raw: sudo pkg update -f 2>&1
   register: _pkg_update
   changed_when: false
   when: pkg_repo_update | bool
@@ -18,7 +18,7 @@
 # ---------------------------------------------------------------------------
 - name: Run pfSense-upgrade --check (dry run)
   ansible.builtin.raw: >
-    {{ pfsense_upgrade_bin }} -d -c 2>&1
+    sudo {{ pfsense_upgrade_bin }} -d -c 2>&1
   register: _upgrade_check
   changed_when: false
   timeout: "{{ upgrade_check_timeout }}"
@@ -51,7 +51,7 @@
 # 3. Check pkg for pending package updates (captures sub-component updates)
 # ---------------------------------------------------------------------------
 - name: Check for pending pkg upgrades (outdated packages)
-  ansible.builtin.raw: pkg version -l '<' 2>&1 | head -40
+  ansible.builtin.raw: sudo pkg version -l '<' 2>&1 | head -40
   register: _pkg_outdated
   changed_when: false
   failed_when: false
@@ -146,4 +146,4 @@
       Re-run with -e "perform_upgrade=true" to apply.
   when:
     - (upgrade_available | bool) or (pkg_outdated_count | int > 0)
-    - not (perform_upgrade | bool)
+    - not (perform_upgrade | bool)
\ No newline at end of file