diff --git a/modules/services/firefly-iii.nix b/modules/services/firefly-iii.nix
index 7a6f2b7..9234841 100644
--- a/modules/services/firefly-iii.nix
+++ b/modules/services/firefly-iii.nix
@@ -407,7 +407,10 @@ in
               {
                 domain = "${cfg.subdomain}.${cfg.domain}";
                 policy = cfg.sso.authorization_policy;
-                subject = [ "group:${cfg.ldap.userGroup}" ];
+                subject = [
+                  "group:${cfg.ldap.userGroup}"
+                  "group:${cfg.ldap.adminGroup}"
+                ];
               }
             ];
           }