diff --git a/hosts/marvin/services/library.nix b/hosts/marvin/services/library.nix
index ca509161..7d43a1e4 100644
--- a/hosts/marvin/services/library.nix
+++ b/hosts/marvin/services/library.nix
@@ -49,6 +49,7 @@ in
       clientId = d.oidcId;
       displayName = "dishNet Library";
       homepageUrl = "https://${d.extUrl}";
+      groups = [ "friends" ];
       clientSecretFile = ./secrets/grimmory-oidc-secret.age;
       redirectUrls = [ "https://${d.extUrl}/oauth2-callback" ];
       postLogoutUrl = "https://${d.extUrl}/api/v1/auth/oidc/backchannel-logout";
diff --git a/hosts/marvin/services/shelfmark.nix b/hosts/marvin/services/shelfmark.nix
index d40d2c16..aa9b1df0 100644
--- a/hosts/marvin/services/shelfmark.nix
+++ b/hosts/marvin/services/shelfmark.nix
@@ -12,9 +12,7 @@ in
       clientId = d.oidcId;
       displayName = "dishNet Shelfmark";
       homepageUrl = url;
-      groups = [
-        "admins"
-      ];
+      groups = [ "admins" ];
       clientSecretFile = ./secrets/shelfmark/oidc-secret.age;
       redirectUrls = [ "${url}/api/auth/oidc/callback" ];
     }