diff --git a/files/platon/11_asterisk_i2c b/files/platon/11_asterisk_i2c
new file mode 100644
index 0000000..589db21
--- /dev/null
+++ b/files/platon/11_asterisk_i2c
@@ -0,0 +1 @@
+asterisk ALL=(root) NOPASSWD: /usr/sbin/i2cget, /usr/sbin/i2cset
diff --git a/host-platon.yml b/host-platon.yml
index 3b9983a..b0623ad 100644
--- a/host-platon.yml
+++ b/host-platon.yml
@@ -277,6 +277,17 @@
         append: yes
       notify: restart asterisk
 
+    # Asterisk now executes shell scripts with reduced privileges, so we need to
+    # use sudo for I2C access.
+    - name: Set up sudo configuration for Asterisk I2C access
+      ansible.builtin.copy:
+        src: "files/platon/11_asterisk_i2c"
+        dest: "/etc/sudoers.d/"
+        owner: root
+        group: root
+        mode: "0644"
+      # Asterisk restart is not necessary
+
     - name: Copy sounds
       ansible.builtin.copy:
         src: "files/platon/{{ item }}"