diff --git a/src/socket.io/groups.js b/src/socket.io/groups.js
index 7d6417b700..b00af300a6 100644
--- a/src/socket.io/groups.js
+++ b/src/socket.io/groups.js
@@ -309,11 +309,12 @@ SocketGroups.loadMore = async (socket, data) => {
 
 SocketGroups.searchMembers = async (socket, data) => {
 	data.uid = socket.uid;
-	const [isOwner, isAdmin] = await Promise.all([
+	const [isOwner, isMember, isAdmin] = await Promise.all([
 		groups.ownership.isOwner(socket.uid, data.groupName),
+		groups.isMember(socket.uid, data.groupName),
 		user.isAdministrator(socket.uid),
 	]);
-	if (!isOwner && !isAdmin) {
+	if (!isOwner && !isMember && !isAdmin) {
 		throw new Error('[[error:no-privileges]]');
 	}
 	return await groups.searchMembers(data);