diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
index 66ca566252..85dba30c4e 100644
--- a/inventory/group_vars/bastion
+++ b/inventory/group_vars/bastion
@@ -35,6 +35,7 @@ ipa_client_shell_groups:
   - sysadmin-troubleshoot
   - sysadmin-qa
   - sysadmin-kernel
+  - sysadmin-riscv
 ipa_client_shell_groups_inherit_from:
   - batcave
 # allow a bunch of sysadmin groups here so they can access internal stuff