diff --git a/auth/auth-module.nix b/auth/auth-module.nix
index 4d8498b..fa831b5 100644
--- a/auth/auth-module.nix
+++ b/auth/auth-module.nix
@@ -331,7 +331,7 @@ in
          , usersGroup
          , ...
          }: {
-          groups = {
+          groups = lib.mkIf (clientID != "selfprivacy-api") {
             "${adminsGroup}".members =
               [ auth-passthru.admins-group ];
             "${usersGroup}".members =