diff --git a/modules/misc/ids.nix b/modules/misc/ids.nix
index 92e9bb908939..218bd0ed47a7 100644
--- a/modules/misc/ids.nix
+++ b/modules/misc/ids.nix
@@ -131,6 +131,7 @@ in
     spamd = 56;
     networkmanager = 57;
     nslcd = 58;
+    scanner = 59;
 
     # When adding a gid, make sure it doesn't match an existing uid.
 
diff --git a/modules/services/hardware/sane.nix b/modules/services/hardware/sane.nix
index 6849b3a7bc8e..905445f22c1b 100644
--- a/modules/services/hardware/sane.nix
+++ b/modules/services/hardware/sane.nix
@@ -29,6 +29,12 @@ with pkgs.lib;
       in mkIf config.hardware.sane.enable {
            environment.systemPackages = [ pkg ];
            services.udev.packages = [ pkg ];
+           
+           users.extraGroups = singleton {
+             name = "scanner";
+             gid = config.ids.gids.scanner;
+           };
+
       };
 
 }