diff --git a/grafana/application.yml b/grafana/application.yml
index 9f1d28e..edd27f8 100644
--- a/grafana/application.yml
+++ b/grafana/application.yml
@@ -54,7 +54,7 @@ data:
     name = OAuth
     icon = signin
     enabled = true
-    empty_scopes = false
+    scopes = openid profile groups
     allow_sign_up = true
     use_pkce = true
     role_attribute_path = contains(groups[*], 'k-space:kubernetes:admins') && 'Admin' || contains(groups[*], 'k-space:floor') && 'Editor' || Viewer