diff --git a/inventory/group_vars/mirrorlist b/inventory/group_vars/mirrorlist
deleted file mode 100644
index 5e03a9c6a1..0000000000
--- a/inventory/group_vars/mirrorlist
+++ /dev/null
@@ -1,30 +0,0 @@
----
-lvm_size: 20000
-mem_size: 8192
-num_cpus: 6
-# for systems that do not match the above - specify the same parameter in
-# the host_vars/$hostname file
-
-custom_rules: [ '-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 80 -j ACCEPT' ]
-collectd_apache: true
-fas_client_groups: sysadmin-noc,fi-apprentice
-nrpe_procs_warn: 500
-nrpe_procs_crit: 600
-# By default run 45 wsgi procs
-mirrorlist_procs: 45
-
-# Set this to get the vpn postfix setup
-postfix_group: vpn
-
-# This vars get shoved into /etc/system_identification by the base role.
-# Groups and individual hosts should override them with specific info.
-# See http://infrastructure.fedoraproject.org/csi/security-policy/
-
-csi_security_category: Moderate
-csi_primary_contact: Fedora Admins - admin@fedoraproject.org
-csi_purpose: Provide the daemon process that serves cached mirror data for requests to mirrorlist_client. Part of the Fedora Mirror Management System
-csi_relationship: |
-         * Relies on fedmsg, haproxy, apache, varnish, mm-backend01 (data) and nagios for monitoring
-         * MirrorManager keeps track of lists of valid mirrors and handles handing out metalink urls to end users to
-         * download packages from. Mirrormanager runs crawlers to check mirror contents, a job to update the public 
-         * lists and other housekeeping jobs. This data is then synced to the mirrorlist servers to serve to end users. 
diff --git a/inventory/group_vars/mirrorlist2 b/inventory/group_vars/mirrorlist2
index 23d04487cc..9d5a2f2a47 100644
--- a/inventory/group_vars/mirrorlist2
+++ b/inventory/group_vars/mirrorlist2
@@ -19,7 +19,7 @@ custom6_rules: [ '-A INPUT -p tcp -m tcp -s 2610:28:3090:3001:dead:beef:cafe:fed
                  '-A INPUT -p tcp -m tcp -s 2a00:d1a0:1::131 --dport 443 -j ACCEPT', ]
 
 collectd_apache: true
-fas_client_groups: sysadmin-noc,fi-apprentice
+fas_client_groups: sysadmin-web,sysadmin-noc,fi-apprentice
 nrpe_procs_warn: 1200
 nrpe_procs_crit: 1400
 # By default run 45 wsgi procs