diff --git a/server.cfg b/server.cfg
index 0762bad0..3904cdf4 100644
--- a/server.cfg
+++ b/server.cfg
@@ -40,6 +40,7 @@ ensure sessionmanager
 ensure hardcap
 
 ## Add system admins
+add_principal group.admin group.user
 add_ace group.admin command allow # allow all commands
 add_ace group.admin command.quit deny # but don't allow quit
 add_ace resource.es_extended command.add_ace allow