diff --git a/products.d/agama-products.changes b/products.d/agama-products.changes
index 409fa4b8d8..395c4def8e 100644
--- a/products.d/agama-products.changes
+++ b/products.d/agama-products.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Feb 25 10:36:54 UTC 2026 - Michal Filka <mfilka@suse.com>
+
+- bsc#1258416
+  - made sudo-policy-wheel-auth-self for MicroOS 
+  - missed in original implementation of jsc#PM-2128
+
 -------------------------------------------------------------------
 Wed Feb 18 14:05:51 UTC 2026 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
 
diff --git a/products.d/kalpa.yaml b/products.d/kalpa.yaml
index e4bdb0a385..e845673bab 100644
--- a/products.d/kalpa.yaml
+++ b/products.d/kalpa.yaml
@@ -92,6 +92,7 @@ software:
   mandatory_packages:
     - NetworkManager
     - openSUSE-repos-MicroOS
+    - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
   optional_packages: []
   base_product: Kalpa
 
diff --git a/products.d/leap_micro_62.yaml b/products.d/leap_micro_62.yaml
index 1d4a235005..925f77f897 100644
--- a/products.d/leap_micro_62.yaml
+++ b/products.d/leap_micro_62.yaml
@@ -54,6 +54,7 @@ software:
     - systemd-default-settings-branding-SLE-Micro
     - wpa_supplicant
     - opensuse-migration-tool
+    - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
 
   optional_packages: []
   base_product: Leap-Micro
diff --git a/products.d/microos.yaml b/products.d/microos.yaml
index 73ce02619f..9310f8a9b0 100644
--- a/products.d/microos.yaml
+++ b/products.d/microos.yaml
@@ -138,6 +138,7 @@ software:
     - microos_defaults
     - microos_hardware
     - microos_selinux
+    - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
   optional_patterns: []
   user_patterns:
     - container_runtime