diff --git a/core/installer/tasks/infra.go b/core/installer/tasks/infra.go
index 3d39eea..d69ba3a 100644
--- a/core/installer/tasks/infra.go
+++ b/core/installer/tasks/infra.go
@@ -260,8 +260,10 @@
 			network = "Private"
 		}
 		if _, err := st.appManager.Install(app, instanceId, appDir, namespace, map[string]any{
-			"network":    network,
-			"authGroups": strings.Join(initGroups, ","),
+			"network": network,
+			// NOTE(gio): Everyone has access to memberships service, so that
+			// they can edit their own profile, request memberships, ...
+			"authGroups": "",
 		}); err != nil {
 			return err
 		}