diff --git a/modules/config/users-groups.nix b/modules/config/users-groups.nix
index 19ec0655ab1..0e02822fb77 100644
--- a/modules/config/users-groups.nix
+++ b/modules/config/users-groups.nix
@@ -77,6 +77,9 @@ let
           { name = "tape";
             gid = ids.gids.tape;
           }
+          { name = "audio";
+            gid = ids.gids.audio;
+          }
           { name = "video";
             gid = ids.gids.video;
           }
diff --git a/modules/services/audio/alsa.nix b/modules/services/audio/alsa.nix
index ea0e1ef29c0..7f313c36cb9 100644
--- a/modules/services/audio/alsa.nix
+++ b/modules/services/audio/alsa.nix
@@ -43,14 +43,7 @@ in
 
   config = mkIf config.sound.enable {
 
-    environment.systemPackages = [alsaUtils];
-
-    users.extraGroups = singleton
-      { # Alsalib seems to require the existence of this group, even
-        # if it's not used (e.g., doesn't own any devices).
-        name = "audio";
-        gid = config.ids.gids.audio;
-      };
+    environment.systemPackages = [ alsaUtils ];
 
     jobs.alsa =
       { startOn = "stopped udevtrigger";