diff --git a/DnsServerCore/DnsWebService.cs b/DnsServerCore/DnsWebService.cs
index 95ef020b..df5ad6ca 100644
--- a/DnsServerCore/DnsWebService.cs
+++ b/DnsServerCore/DnsWebService.cs
@@ -1627,6 +1627,8 @@ private async Task StartWebServiceAsync(bool httpOnlyMode)
                     options.Scope.Add("openid");
                     options.Scope.Add("profile");
                     options.Scope.Add("email");
+                    options.Scope.Add("groups");
+                    options.Scope.Add("roles");
 
                     options.CallbackPath = new PathString("/sso/callback");