{...}: {
  users.groups.storage = {};
  users.users.storage = {
    isNormalUser = true;
    extraGroups = ["storage"];
  };
}