diff --git a/roles/kodi/default.nix b/roles/kodi/default.nix
index 92fa302..498ea26 100644
--- a/roles/kodi/default.nix
+++ b/roles/kodi/default.nix
@@ -27,7 +27,10 @@ in
     ]);
   in mkIf cfg.enable
     {
-      users.extraUsers.kodi.isNormalUser = true;
+      users.extraUsers.kodi = {
+        isNormalUser = true;
+	extraGroups = [ "wheel" "networkmanager" "audio" "video" ];
+      };
 
       networking.firewall = {
         allowedTCPPorts = [ 8080 ];