diff --git a/access_rule_groups.tf b/access_rule_groups.tf
index cd63dcc..b90b080 100644
--- a/access_rule_groups.tf
+++ b/access_rule_groups.tf
@@ -36,6 +36,8 @@
 resource "cloudflare_zero_trust_access_group" "default_groups" {
   account_id = local.cloudflare_account_id
   name       = "default group"
+  zone_id    = var.cloudflare_zone_id
+  is_default = true
 
   include = [
     {