[Unit]
Description=Sync FreeIPA BaseUser membership to local group
After=sssd.service

[Service]
Type=oneshot
ExecStart=/usr/local/bin/auto-add-baseuser.sh