diff --git a/prdoc/pr_2783.prdoc b/prdoc/pr_2783.prdoc
new file mode 100644
index 000000000000..0e4c99065414
--- /dev/null
+++ b/prdoc/pr_2783.prdoc
@@ -0,0 +1,12 @@
+title: "Accept Root origin as valid sudo"
+
+doc:
+  - audience: Runtime User
+    description: |
+      Dispatchables of `pallet-sudo` will now also accept the `Root` origin
+      as valid `sudo` origin. This enhancement is useful for parachains that
+      allow the relay chain as a superuser. It enables the relay chain to send
+      an XCM message to initialize the sudo key.
+
+crates:
+  - name: "pallet-sudo"
diff --git a/substrate/frame/sudo/src/lib.rs b/substrate/frame/sudo/src/lib.rs
index d556c5eb6ae6..4f14c32ff76b 100644
--- a/substrate/frame/sudo/src/lib.rs
+++ b/substrate/frame/sudo/src/lib.rs
@@ -349,12 +349,16 @@ pub mod pallet {
 	impl<T: Config> Pallet<T> {
 		/// Ensure that the caller is the sudo key.
 		pub(crate) fn ensure_sudo(origin: OriginFor<T>) -> DispatchResult {
-			let sender = ensure_signed(origin)?;
-
-			if Self::key().map_or(false, |k| k == sender) {
-				Ok(())
+			let sender = ensure_signed_or_root(origin)?;
+
+			if let Some(sender) = sender {
+				if Self::key().map_or(false, |k| k == sender) {
+					Ok(())
+				} else {
+					Err(Error::<T>::RequireSudo.into())
+				}
 			} else {
-				Err(Error::<T>::RequireSudo.into())
+				Ok(())
 			}
 		}
 	}
diff --git a/substrate/frame/sudo/src/tests.rs b/substrate/frame/sudo/src/tests.rs
index 13dc069ddef1..73689415a737 100644
--- a/substrate/frame/sudo/src/tests.rs
+++ b/substrate/frame/sudo/src/tests.rs
@@ -169,6 +169,18 @@ fn remove_key_works() {
 	});
 }
 
+#[test]
+fn using_root_origin_works() {
+	new_test_ext(1).execute_with(|| {
+		assert_ok!(Sudo::remove_key(RuntimeOrigin::root()));
+		assert!(Sudo::key().is_none());
+		System::assert_has_event(TestEvent::Sudo(Event::KeyRemoved {}));
+
+		assert_ok!(Sudo::set_key(RuntimeOrigin::root(), 1));
+		assert_eq!(Some(1), Sudo::key());
+	});
+}
+
 #[test]
 fn sudo_as_basics() {
 	new_test_ext(1).execute_with(|| {