diff --git a/roles/pfsense_upgrade/tasks/carp.yml b/roles/pfsense_upgrade/tasks/carp.yml
index 56b6f56..bfdfd42 100644
--- a/roles/pfsense_upgrade/tasks/carp.yml
+++ b/roles/pfsense_upgrade/tasks/carp.yml
@@ -96,7 +96,7 @@
 # --- Step 4: Force demotion of primary ---
 - name: "[CARP/primary] Force CARP demotion on this node (set advskew to 254)"
   ansible.builtin.raw: >
-    php -r "
+    sudo php -r "
     require_once('/etc/inc/interfaces.inc');
     interfaces_carp_set_maintenancemode(true);
     "
@@ -146,7 +146,7 @@
 # ---------------------------------------------------------------------------
 - name: "[CARP/primary] Re-enable CARP maintenance mode off (restore advskew)"
   ansible.builtin.raw: >
-    php -r "
+    sudo php -r "
     require_once('/etc/inc/interfaces.inc');
     interfaces_carp_set_maintenancemode(false);
     "