diff --git a/deployment/check/data-model-tf-proxmox/nixosTest.nix b/deployment/check/data-model-tf-proxmox/nixosTest.nix
index db530851..6893c1fa 100644
--- a/deployment/check/data-model-tf-proxmox/nixosTest.nix
+++ b/deployment/check/data-model-tf-proxmox/nixosTest.nix
@@ -159,12 +159,9 @@ in
       set -e
       pvesh create /pools --poolid Fediversity
       pvesh set /storage/local --content "vztmpl,rootdir,backup,snippets,import,iso,images" 1>/dev/null
-      pvesh create /access/groups --groupid "roots"
-      pvesh set /access/users/root@pam --enable 1 --groups "roots"
-      pvesh set /access/acl --path "/" --roles "Administrator" --groups "roots"
-      pvesh create /access/users/root@pam/token/mytoken --privsep 0 --output-format json | jq -r .value
+      pvesh create /access/users/root@pam/token/mytoken --output-format json | jq -r .value
+      pvesh set /access/acl --path "/" --token "root@pam!mytoken" --roles "Administrator"
     """).strip()
-    # FIXME pass separate privileges rather than disabling privsep
 
     # skip indent for EOF
     deployer.succeed(f"""