diff --git a/approle_auth.tf b/approle_auth.tf
index cb28e2b..942e077 100644
--- a/approle_auth.tf
+++ b/approle_auth.tf
@@ -9,7 +9,7 @@ resource "vault_auth_backend" "approle" {
 
 resource "vault_identity_group" "this" {
   name = var.tenant_name
-  type = "internal"
+  type = "external"
   metadata = {
     tenant = var.tenant_name
     prefix = var.tenant_prefix