diff --git a/configs/default.nix b/configs/default.nix
index af217df..fa1aafc 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -66,6 +66,8 @@ in
         extraGroups = [
           "pipewire"
           "audio"
+          "lp"
+          "scanner"
         ];
       };
 
diff --git a/configs/printing.nix b/configs/printing.nix
index 6c0dbd1..5b28d09 100644
--- a/configs/printing.nix
+++ b/configs/printing.nix
@@ -26,7 +26,7 @@ in
     openFirewall = true;
   };
 
-  users.users.me.extraGroups = [ "lp" "scanner" ];
+  # users.users.me.extraGroups is set in configs/default.nix which defines the "me" user
 
   hardware.printers.ensurePrinters = [
     {
diff --git a/systems/zaatar/configuration.nix b/systems/zaatar/configuration.nix
index bfea5ed..91470f3 100644
--- a/systems/zaatar/configuration.nix
+++ b/systems/zaatar/configuration.nix
@@ -77,6 +77,8 @@
       pkgs.python3 # for sshuttle
     ];
 
+  users.users.root.extraGroups = [ "lp" "scanner" ];
+
   networking = {
     hostName = "zaatar";
     wireless.interfaces = [ "wlp2s0" ];