diff --git a/modules/users/aires/default.nix b/modules/users/aires/default.nix
index c66b737..e35cab6 100644
--- a/modules/users/aires/default.nix
+++ b/modules/users/aires/default.nix
@@ -50,6 +50,7 @@ in
             "plugdev"
             "tss"
             "wheel"
+            "users"
           ]; # tss group has access to TPM devices
 
           # Allow systemd services to run even while aires is logged out
diff --git a/modules/users/gremlin/default.nix b/modules/users/gremlin/default.nix
index bc0e95a..579204c 100644
--- a/modules/users/gremlin/default.nix
+++ b/modules/users/gremlin/default.nix
@@ -27,6 +27,7 @@ in
         extraGroups = [
           "networkmanager"
           "input"
+          "groups"
         ];
 
         # Allow systemd services to keep running even while gremlin is logged out