diff --git a/docker/barbican/barbican-base/Dockerfile.j2 b/docker/barbican/barbican-base/Dockerfile.j2
index 5cb53092b2..06700527cc 100644
--- a/docker/barbican/barbican-base/Dockerfile.j2
+++ b/docker/barbican/barbican-base/Dockerfile.j2
@@ -5,7 +5,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
 
 {% import "macros.j2" as macros with context %}
 
-{{ macros.configure_user(name='barbican') }}
+{{ macros.configure_user(name='barbican', groups='nfast') }}
 
 {% if install_type == 'binary' %}
     {% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
diff --git a/kolla/common/config.py b/kolla/common/config.py
index 6121fd9ac0..16a7901970 100755
--- a/kolla/common/config.py
+++ b/kolla/common/config.py
@@ -1130,7 +1130,11 @@ USERS = {
     'tempest-user': {
         'uid': 42480,
         'gid': 42480,
-    }
+    },
+    'nfast-user': {
+        'uid': 42481,  # unused user, but we need the group for thales hsm
+        'gid': 42481,
+    },
 }