diff --git a/monolith_apps_sub_manifest.tf b/monolith_apps_sub_manifest.tf
new file mode 100644
index 0000000..246d350
--- /dev/null
+++ b/monolith_apps_sub_manifest.tf
@@ -0,0 +1,10 @@
+resource "zentral_monolith_sub_manifest" "apps" {
+  name        = "Mandatory apps"
+  description = "The mandatory apps for our standard macOS client"
+}
+
+resource "zentral_monolith_sub_manifest_pkg_info" "onepassword" {
+  sub_manifest_id = zentral_monolith_sub_manifest.apps.id
+  key             = "managed_installs"
+  pkg_info_name   = "1Password"
+}
diff --git a/monolith_manifests.tf b/monolith_manifests.tf
index ad09992..aae8e9c 100644
--- a/monolith_manifests.tf
+++ b/monolith_manifests.tf
@@ -41,3 +41,8 @@ resource "zentral_monolith_manifest_sub_manifest" "default-agents" {
   manifest_id     = zentral_monolith_manifest.default.id
   sub_manifest_id = zentral_monolith_sub_manifest.agents.id
 }
+
+resource "zentral_monolith_manifest_sub_manifest" "default-apps" {
+  manifest_id     = zentral_monolith_manifest.default.id
+  sub_manifest_id = zentral_monolith_sub_manifest.apps.id
+}