diff --git a/linux/compliance.yaml b/linux/compliance.yaml
index 0d2b87b..d3d11ec 100644
--- a/linux/compliance.yaml
+++ b/linux/compliance.yaml
@@ -71,7 +71,7 @@
         password: "{{ nhadmin_password | password_hash('sha512') }}"
         shell: /bin/bash
         # add to sudo, systemd-journal
-        groups: sudo systemd-journal
+        groups: sudo,systemd-journal
         append: yes
     # Sysadmin user SSH pub key
     # This is a really stupid way to do it, but alas.