diff --git a/flake.nix b/flake.nix
index d400b76..d50e2a9 100644
--- a/flake.nix
+++ b/flake.nix
@@ -350,6 +350,7 @@
                   boot.loader.systemd-boot.enable = inputs.nixpkgs.lib.mkForce false;
                   boot.loader.efi.canTouchEfiVariables = inputs.nixpkgs.lib.mkForce false;
                   services.amazon-ssm-agent.enable = true;
+                  users.users.ssm-user.extraGroups = [ "wheel" ];
                 }
               )
             ];