diff --git a/conf/systemd.service b/conf/systemd.service
index 376e19b..47f2fc0 100644
--- a/conf/systemd.service
+++ b/conf/systemd.service
@@ -12,7 +12,7 @@ ExecStart=__INSTALL_DIR__/live/galene -http "127.0.0.1:__PORT__" -insecure -turn
 LimitNOFILE=65536
 
 # various hardening options
-ReadWritePaths=__DATA_DIR__/recordings
+ReadWritePaths=__DATA_DIR__/recordings __DATA_DIR__/groups
 CapabilityBoundingSet=
 AmbientCapabilities=
 PrivateTmp=yes