diff --git a/common/users/qenya.nix b/common/users/qenya.nix
index 14b0458..127d6cc 100644
--- a/common/users/qenya.nix
+++ b/common/users/qenya.nix
@@ -5,11 +5,6 @@ in {
   users.users.qenya = {
     isNormalUser = true;
     home = "/home/qenya";
-    extraGroups = [
-      "wheel" # sudo
-      "networkmanager" # UI wifi configuration
-      "dialout" # access to serial ports
-    ];
     shell = pkgs.zsh;
     openssh.authorizedKeys.keys = keys.users.qenya;
     uid = 1001;
diff --git a/hosts/kalessin/configuration.nix b/hosts/kalessin/configuration.nix
index 238ddb9..4e2ddea 100644
--- a/hosts/kalessin/configuration.nix
+++ b/hosts/kalessin/configuration.nix
@@ -7,7 +7,8 @@
 
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
-  
+
+  users.users.qenya.extraGroups = [ "wheel" ];
   qenya.sysadmin.enable = true;
 
   system.stateVersion = "23.11";
diff --git a/hosts/orm/configuration.nix b/hosts/orm/configuration.nix
index d33d4e6..e0cbe89 100644
--- a/hosts/orm/configuration.nix
+++ b/hosts/orm/configuration.nix
@@ -8,6 +8,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   
+  users.users.qenya.extraGroups = [ "wheel" ];
   qenya.sysadmin.enable = true;
 
   age.secrets.wireguard-peer-orm.file = ../../secrets/wireguard-peer-orm.age;
diff --git a/hosts/tohru/configuration.nix b/hosts/tohru/configuration.nix
index bc9f644..ff3a1a5 100644
--- a/hosts/tohru/configuration.nix
+++ b/hosts/tohru/configuration.nix
@@ -43,6 +43,12 @@
   sound.enable = true;
   hardware.pulseaudio.enable = true;
 
+  users.users.qenya.extraGroups = [
+    "wheel" # sudo
+    "networkmanager" # UI wifi configuration
+    "dialout" # access to serial ports
+  ];
+
   # USB drives
   boot.supportedFilesystems = [ "ntfs" ];
 
diff --git a/hosts/yevaud/configuration.nix b/hosts/yevaud/configuration.nix
index d8d11aa..13b70b3 100644
--- a/hosts/yevaud/configuration.nix
+++ b/hosts/yevaud/configuration.nix
@@ -7,7 +7,9 @@
 
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
-  
+
+  users.users.qenya.extraGroups = [ "wheel" ];
+
   qenya.sysadmin.enable = true;
 
   age.secrets.wireguard-peer-yevaud.file = ../../secrets/wireguard-peer-yevaud.age;