diff --git a/sudoers.d/ceph-osd-smartctl b/sudoers.d/ceph-osd-smartctl
new file mode 100644
index 00000000000..a5cdb536398
--- /dev/null
+++ b/sudoers.d/ceph-osd-smartctl
@@ -0,0 +1,3 @@
+## allow ceph-osd (which runs as user ceph) to collect device health metrics
+
+ceph ALL=NOPASSWD: /usr/sbin/smartctl -a --json /dev/*