diff --git a/modules/ocf_admin/manifests/create.pp b/modules/ocf_admin/manifests/create.pp
index db297423b..65babfd4d 100644
--- a/modules/ocf_admin/manifests/create.pp
+++ b/modules/ocf_admin/manifests/create.pp
@@ -7,9 +7,8 @@
     '/etc/ocf-create':
       ensure => directory;
 
-    # TODO: ideally this file wouldn't be directly readable by staff
     '/etc/ocf-create/ocf-create.conf':
-      group     => ocfstaff,
+      group     => ocfroot,
       content   => template('ocf_admin/create.conf.erb'),
       mode      => '0440',
       show_diff => false;