diff --git a/deploy/grafana/grafana-deploy.yaml b/deploy/grafana/grafana-deploy.yaml
index 1023824..edb1a8f 100644
--- a/deploy/grafana/grafana-deploy.yaml
+++ b/deploy/grafana/grafana-deploy.yaml
@@ -48,7 +48,7 @@ spec:
             - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_STRICT
               value: "false"
             - name: GF_AUTH_GENERIC_OAUTH_SCOPES
-              value: "openid profile email"
+              value: "openid profile email groups"
             - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH
               value: "contains(groups, 'grafana_admin') && 'Admin' || 'Viewer'"
             - name: GF_SERVER_ROOT_URL