diff --git a/common/users.nix b/common/users.nix
index fb5a0fc..0d1d2bb 100644
--- a/common/users.nix
+++ b/common/users.nix
@@ -13,17 +13,14 @@ in {
     mainUser = "lukas";
 
     users = {
-      root = {
-        hashedPassword = "!";
-        # TODO define this more granularly
-        openssh.authorizedKeys.keys = [];
-      };
+      root.hashedPassword = "!";
       ${mainUser} = {
         description = "Lukas Wurzinger";
         uid = 1000;
         isNormalUser = true;
         hashedPasswordFile = config.age.secrets."user-${mainUser}".path;
         openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+        extraGroups = ["wheel"];
       };
     };
   };