diff --git a/images/fedora-intune/files/himmelblau.conf b/images/fedora-intune/files/himmelblau.conf
index b973b44..2fecf35 100644
--- a/images/fedora-intune/files/himmelblau.conf
+++ b/images/fedora-intune/files/himmelblau.conf
@@ -11,6 +11,9 @@ apply_policy = true
 # Fedora's admin group; members of sudo_groups (Entra group object IDs) are
 # added to it.
 local_sudo_group = wheel
+# Linux admins: members get wheel (sudo) at sign-in, and lose it again within
+# local_groups_reconcile_interval after leaving the group.
+sudo_groups = c3b1cfcc-7834-47eb-948b-a22204276453
 # Home directories named after the account (e.g. /home/jdoe), with a UPN alias.
 home_attr = CN
 home_alias = SPN