diff --git a/debian/postinst b/debian/postinst
index be55ab5..67a90fb 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -23,7 +23,7 @@
 echo 'aiy:aiy' |chpasswd
 
 # Create group apex to give aiy user r/w privileges to apex devices
-groupadd apex
+groupadd apex || true
 
 GROUPS="adm audio bluetooth games i2c input plugdev staff sudo users video netdev systemd-journal apex"
 
diff --git a/etc/polkit-1/localauthority/10-vendor.d/org.freedesktop.NetworkManager.pkla b/etc/polkit-1/localauthority/10-vendor.d/org.freedesktop.NetworkManager.pkla
new file mode 100644
index 0000000..46cd21c
--- /dev/null
+++ b/etc/polkit-1/localauthority/10-vendor.d/org.freedesktop.NetworkManager.pkla
@@ -0,0 +1,6 @@
+[Adding or changing system-wide NetworkManager connections]
+Identity=unix-group:netdev;unix-group:sudo
+Action=org.freedesktop.NetworkManager.*
+ResultAny=yes
+ResultInactive=no
+ResultActive=yes
\ No newline at end of file