diff --git a/playbooks/groups/copr-keygen.yml b/playbooks/groups/copr-keygen.yml
index e4d90a7fba..ae73f9ed44 100644
--- a/playbooks/groups/copr-keygen.yml
+++ b/playbooks/groups/copr-keygen.yml
@@ -43,13 +43,6 @@
     hostname: name="{{copr_hostbase}}.cloud.fedoraproject.org"
     when: datacenter != "aws"
 
-# To avoid ID collisions with roles that are provisioned earlier
-- name: pre-create users and groups with specifics UIDs and GIDs
-  tasks:
-  - group: name="copr-signer" state=present gid=989
-  - group: name="apache" state=present gid=48
-  - user: name="copr-signer" group=copr-signer groups=apache uid=992
-
 - name: provision instance
   hosts: copr_keygen_dev:copr_keygen_stg:copr_keygen:copr_keygen_dev_aws:copr_keygen_aws
   gather_facts: True
@@ -59,6 +52,13 @@
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
 
+  # To avoid ID collisions with roles that are provisioned earlier
+  - name: pre-create users and groups with specifics UIDs and GIDs
+    tasks:
+    - group: name="copr-signer" state=present gid=989
+    - group: name="apache" state=present gid=48
+    - user: name="copr-signer" group=copr-signer groups=apache uid=992
+
   roles:
   - base
   - nagios_client