diff --git a/host_vars/cn-xworkmate-bridge.svc.plus.yml b/host_vars/cn-xworkmate-bridge.svc.plus.yml
index 3af8e5f..29adfa2 100644
--- a/host_vars/cn-xworkmate-bridge.svc.plus.yml
+++ b/host_vars/cn-xworkmate-bridge.svc.plus.yml
@@ -4,9 +4,9 @@ xworkmate_bridge_public_base_url: https://cn-xworkmate-bridge.svc.plus
 xworkmate_bridge_service_domain: cn-xworkmate-bridge.svc.plus
 xworkmate_bridge_service_public_base_url: https://cn-xworkmate-bridge.svc.plus
 xworkmate_bridge_binary_path: /usr/local/bin/xworkmate-bridge
-xworkmate_bridge_service_user: root
-xworkmate_bridge_service_group: root
-xworkmate_bridge_service_home: /root
+xworkmate_bridge_service_user: ubuntu
+xworkmate_bridge_service_group: ubuntu
+xworkmate_bridge_service_home: /home/ubuntu
 xworkmate_bridge_required_services: []
 xworkmate_bridge_required_listeners:
   - host: 127.0.0.1
diff --git a/roles/vhosts/xworkmate_bridge/tasks/main.yml b/roles/vhosts/xworkmate_bridge/tasks/main.yml
index 4a0f2a1..74cee3a 100644
--- a/roles/vhosts/xworkmate_bridge/tasks/main.yml
+++ b/roles/vhosts/xworkmate_bridge/tasks/main.yml
@@ -4,6 +4,19 @@
     name: "{{ xworkmate_bridge_packages }}"
     state: present
 
+- name: Ensure xworkmate-bridge service group exists
+  ansible.builtin.group:
+    name: "{{ xworkmate_bridge_service_group }}"
+    state: present
+
+- name: Ensure xworkmate-bridge service user exists
+  ansible.builtin.user:
+    name: "{{ xworkmate_bridge_service_user }}"
+    group: "{{ xworkmate_bridge_service_group }}"
+    shell: /bin/bash
+    create_home: true
+    state: present
+
 - name: Ensure xworkmate-bridge base directory exists
   ansible.builtin.file:
     path: "{{ xworkmate_bridge_base_dir }}"