diff --git a/abra.sh b/abra.sh
index 2b71092..f194a7d 100644
--- a/abra.sh
+++ b/abra.sh
@@ -1,4 +1,4 @@
 export CUSTOM_ENTRYPOINT_VERSION=v14
 export OIDC_CONF_VERSION=v1
 export PAM_EXEC_OAUTH2_YAML_VERSION=v1
-export PAM_SCRIPT_AUTH_VERSION=v6
+export PAM_SCRIPT_AUTH_VERSION=v7
diff --git a/pam_script_auth.sh b/pam_script_auth.sh
index 0b93c50..6d11fad 100755
--- a/pam_script_auth.sh
+++ b/pam_script_auth.sh
@@ -13,6 +13,7 @@ if ! id "$PAM_USER" &>/dev/null; then
 	uid=$(echo "$PAM_USER" | md5sum | grep -Eo "[[:digit:]]{3}"  | head -n1 | sed -E 's/^0+//')
 	uid=$((1000+uid))
 	adduser --uid="$uid" "$PAM_USER" --disabled-password --quiet --gecos ""
+    usermod -aG staff "$PAM_USER"
 fi
 
 exit 0