diff --git a/site-modules/profile/manifests/swh/deploy/base_vault.pp b/site-modules/profile/manifests/swh/deploy/base_vault.pp
index aaeb5ddb..f8c22a78 100644
--- a/site-modules/profile/manifests/swh/deploy/base_vault.pp
+++ b/site-modules/profile/manifests/swh/deploy/base_vault.pp
@@ -1,16 +1,17 @@
 class profile::swh::deploy::base_vault {
   $conf_directory = lookup('swh::deploy::vault::conf_directory')
+  $group = lookup('swh::deploy::vault::group')
 
   file {$conf_directory:
     ensure => directory,
     owner  => 'root',
     group  => $group,
     mode   => '0755',
   }
 
   $packages = ['python3-swh.vault']
 
   package {$packages:
     ensure => 'present',
   }
 }
diff --git a/site-modules/profile/manifests/swh/deploy/vault.pp b/site-modules/profile/manifests/swh/deploy/vault.pp
index 0da6c7d1..d92d2a9b 100644
--- a/site-modules/profile/manifests/swh/deploy/vault.pp
+++ b/site-modules/profile/manifests/swh/deploy/vault.pp
@@ -1,19 +1,20 @@
 # Deployment of the swh.vault.api server
 
 class profile::swh::deploy::vault {
   include ::profile::swh::deploy::base_vault
   Package['python3-swh.vault'] ~> Service['gunicorn-swh-vault']
 
+  $group = lookup('swh::deploy::vault::group')
   $cache_directory = lookup('swh::deploy::vault::cache')
   file {$cache_directory:
     ensure => directory,
     owner  => 'root',
     group  => $group,
     mode   => '0755',
   }
 
   ::profile::swh::deploy::rpc_server {'vault':
     executable => 'swh.vault.api.wsgi:app',
     worker     => 'async',
   }
 }