diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
index a07d8f7a30..c612788bff 100644
--- a/inventory/group_vars/bastion
+++ b/inventory/group_vars/bastion
@@ -20,8 +20,10 @@ custom_rules: [
 ]
 #
 # allow a bunch of sysadmin groups here so they can access internal stuff
-#
-fas_client_groups: sysadmin-ask,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-darkserver,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran
+
+# TODO - remove modularity-wg membership here once it is not longer needed:
+# https://fedorahosted.org/fedora-infrastructure/ticket/5363
+fas_client_groups: sysadmin-ask,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-darkserver,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,modularity-wg
 
 #
 # This is a postfix gateway. This will pick up gateway postfix config in base