diff --git a/inventory/group_vars/os_control b/inventory/group_vars/os_control
index b63a1ba8c0..1c1f09fb5c 100644
--- a/inventory/group_vars/os_control
+++ b/inventory/group_vars/os_control
@@ -2,3 +2,8 @@
 
 os_url: os.fedoraproject.org
 os_app_url: app.os.fedoraproject.org
+
+ipa_client_shell_groups:
+- sysadmin-openshift
+ipa_client_sudo_groups:
+- sysadmin-openshift
diff --git a/inventory/group_vars/os_control_stg b/inventory/group_vars/os_control_stg
index 63a4f230c3..d0aaf440f6 100644
--- a/inventory/group_vars/os_control_stg
+++ b/inventory/group_vars/os_control_stg
@@ -2,3 +2,8 @@
 
 os_url: os.stg.fedoraproject.org
 os_app_url: app.os.stg.fedoraproject.org
+
+ipa_client_shell_groups:
+- sysadmin-openshift
+ipa_client_sudo_groups:
+- sysadmin-openshift