diff --git a/defaults/main.yml b/defaults/main.yml
index a928993..c78cc76 100755
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -48,4 +48,5 @@ borg_user: "root"
 borg_group: "root"
 backup_user_info:
   home: "/home/{{ borg_user }}"
+borgmatic_run_as_root: false
 ...
diff --git a/meta/argument_specs.yml b/meta/argument_specs.yml
index bfb8226..f546d9b 100644
--- a/meta/argument_specs.yml
+++ b/meta/argument_specs.yml
@@ -192,3 +192,7 @@ argument_specs:
         type: str
         required: false
         description: Name of the SSH public and private key
+      borgmatic_run_as_root:
+        type: bool
+        required: false
+        description: If the variable is set, systemd will run borgmatic using sudo.
diff --git a/templates/borgmatic.service.j2 b/templates/borgmatic.service.j2
index 8d5803b..3339e98 100644
--- a/templates/borgmatic.service.j2
+++ b/templates/borgmatic.service.j2
@@ -12,7 +12,7 @@ ConditionACPower=true
 [Service]
 Type=oneshot
 User={{ borg_user }}
-ExecStart={{ 'sudo ' if borg_user != 'root'}}borgmatic -c /etc/borgmatic/{{ borgmatic_config_name }}
+ExecStart={{ 'sudo ' if borgmatic_run_as_root}}borgmatic -c /etc/borgmatic/{{ borgmatic_config_name }}
 
 # Source: https://projects.torsion.org/borgmatic-collective/borgmatic/raw/branch/master/sample/systemd/borgmatic.service
 # Security settings for systemd running as root, optional but recommended to improve security. You
@@ -22,7 +22,7 @@ LockPersonality=true
 # Certain borgmatic features like Healthchecks integration need MemoryDenyWriteExecute to be off.
 # But you can try setting it to "yes" for improved security if you don't use those features.
 MemoryDenyWriteExecute=no
-NoNewPrivileges={{ 'no' if borg_user != 'root' else 'yes'}}
+NoNewPrivileges={{ 'no' if borgmatic_run_as_root else 'yes'}}
 PrivateDevices=yes
 PrivateTmp=yes
 ProtectClock=yes