diff --git a/config/settings/base.py b/config/settings/base.py
index d602663f7c841626d5086a9cc162758e5049f988..28f2352a09ffb64d39119d6ce562a04d79e79731 100644
--- a/config/settings/base.py
+++ b/config/settings/base.py
@@ -115,12 +115,14 @@ SUPEREVENT_MANAGERS_GROUP = 'superevent_managers'
 EXTERNAL_ANALYSIS_GROUP = 'External'
 
 # Groups directly managed by GraceDB admins
-ADMIN_MANAGED_GROUPS = [EM_ADVOCATE_GROUP, EXEC_GROUP,
+ADMIN_MANAGED_GROUPS = [EM_ADVOCATE_GROUP, EXEC_GROUP, PUBLIC_GROUP,
     SUPEREVENT_MANAGERS_GROUP, ACCESS_MANAGERS_GROUP]
 # NOTE: soon, only superevent_managers will be fully managed by us. The other
 # groups will be managed by the LIGO auth infrastructure for human users. But
 # we will still have to still manage robot account membership in these groups:
 # access_managers, executives, and em_advocates.
+# NOTE: public_users is also managed by us and has only one member
+# (guardian.AnonymousUser)
 
 # Tag to apply to log messages to allow EM partners to view
 EXTERNAL_ACCESS_TAGNAME = 'lvem'