diff --git a/profiles/base/accounts/group/vpn b/profiles/base/accounts/group/vpn
new file mode 100644
index 0000000..1bfc2c2
--- /dev/null
+++ b/profiles/base/accounts/group/vpn
@@ -0,0 +1,5 @@
+# Members of this group have access to the files used by VPN clients
+# (e.g., configuration files)
+group:vpn
+gid:20174
+users:vpn,shill
diff --git a/profiles/base/accounts/user/vpn b/profiles/base/accounts/user/vpn
new file mode 100644
index 0000000..2236ba3
--- /dev/null
+++ b/profiles/base/accounts/user/vpn
@@ -0,0 +1,6 @@
+user:vpn
+uid:20174
+gid:20174
+gecos:CrOS VPN clients
+home:/dev/null
+shell:/bin/false