diff --git a/grafana.yaml b/grafana.yaml
index 5d3f36d..9373da7 100644
--- a/grafana.yaml
+++ b/grafana.yaml
@@ -93,7 +93,7 @@ spec:
                   key: OIDC_CLIENT_SECRET
 
             - name: GF_AUTH_GENERIC_OAUTH_SCOPES
-              value: "openid profile"
+              value: "openid profile groups"
 
             # From your existing OIDC secret: auth/token/me endpoints
             - name: GF_AUTH_GENERIC_OAUTH_AUTH_URL