diff --git a/site/profiles/manifests/base.pp b/site/profiles/manifests/base.pp
index d9aaa90..7eec9ab 100644
--- a/site/profiles/manifests/base.pp
+++ b/site/profiles/manifests/base.pp
@@ -28,6 +28,7 @@ class profiles::base (
     include profiles::base::hosts
     include profiles::base::groups
     include profiles::base::root
+    include profiles::accounts::sysadmin
     include profiles::ntp::client
     include profiles::dns::base
     include profiles::pki::vault
diff --git a/site/profiles/manifests/firstrun/init.pp b/site/profiles/manifests/firstrun/init.pp
index a3134e5..3b33622 100644
--- a/site/profiles/manifests/firstrun/init.pp
+++ b/site/profiles/manifests/firstrun/init.pp
@@ -13,6 +13,7 @@ class profiles::firstrun::init {
   include profiles::base::motd
 
   # create the sysadmin account
+  include profiles::base::groups
   include profiles::accounts::sysadmin
 
   # mark the firstrun as done