diff --git a/modules/build-types/docker.nix b/modules/build-types/docker.nix
index d83aa04..d3c3be3 100644
--- a/modules/build-types/docker.nix
+++ b/modules/build-types/docker.nix
@@ -33,6 +33,9 @@
   ];
 
   users.users.${vars.primaryUser}.extraGroups = [ "docker" ];
+  # Grant the IPA domain user docker access via the local group so that
+  # `wayne` can manage containers without sudo.
+  users.groups.docker.members = [ "wayne" ];
   services.openssh.settings.PermitRootLogin = "yes";
 
   networking.firewall.allowedTCPPorts = [