diff --git a/management/server/idp/embedded.go b/management/server/idp/embedded.go
index 79859525b..db7a91fa3 100644
--- a/management/server/idp/embedded.go
+++ b/management/server/idp/embedded.go
@@ -20,7 +20,7 @@ const (
 	staticClientCLI        = "netbird-cli"
 	defaultCLIRedirectURL1 = "http://localhost:53000/"
 	defaultCLIRedirectURL2 = "http://localhost:54000/"
-	defaultScopes          = "openid profile email"
+	defaultScopes          = "openid profile email groups"
 	defaultUserIDClaim     = "sub"
 )