Ah, the puppet user's gid group needs to be checked