diff --git a/playbooks/tox-with-sudo/run.yaml b/playbooks/tox-with-sudo/run.yaml
new file mode 100644
index 00000000..22f82096
--- /dev/null
+++ b/playbooks/tox-with-sudo/run.yaml
@@ -0,0 +1,3 @@
+- hosts: all
+  roles:
+    - tox
diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
index a83b23aa..6735eab1 100644
--- a/zuul.d/jobs.yaml
+++ b/zuul.d/jobs.yaml
@@ -234,6 +234,14 @@
     vars:
       tox_constraints_file: '{{ ansible_user_dir }}/src/git.openstack.org/openstack/requirements/upper-constraints.txt'
 
+- job:
+    name: openstack-tox-with-sudo
+    parent: openstack-tox
+    description: |
+      Job to run tox for tests with OpenStack project specific
+      settings such as constraints but without sudo access being revoked.
+    run: playbooks/tox-with-sudo/run.yaml
+
 - job:
     name: openstack-tox-py27
     parent: openstack-tox
@@ -345,7 +353,7 @@
     name: openstack-tox-functional
     parent: openstack-tox
     description: |
-      Run functional tests.
+      Run tox-based functional tests for an OpenStack Python project.
 
       Uses tox with the ``functional`` environment.
     irrelevant-files:
@@ -355,11 +363,27 @@
     vars:
       tox_envlist: functional
 
+- job:
+    name: openstack-tox-functional-with-sudo
+    parent: openstack-tox-with-sudo
+    description: |
+      Run tox-based functional tests for an OpenStack Python project.
+
+      Uses tox with the ``functional`` environment.
+      Sudo access is not revoked.
+    irrelevant-files:
+      - ^.*\.rst$
+      - ^doc/.*$
+      - ^releasenotes/.*$
+    vars:
+      tox_envlist: functional
+
 - job:
     name: openstack-tox-functional-py35
     parent: openstack-tox
     description: |
-      Run functional tests using python 3.5.
+      Run tox-based functional tests for an OpenStack Python project
+      under cPython version 3.5..
 
       Uses tox with the ``functional-py35`` environment.
     irrelevant-files: