diff --git a/hswaw/paperless/paperless.libsonnet b/hswaw/paperless/paperless.libsonnet
index 9f0ba4b..9972345 100644
--- a/hswaw/paperless/paperless.libsonnet
+++ b/hswaw/paperless/paperless.libsonnet
@@ -101,7 +101,7 @@
                                 OAUTH2_PROXY_CLIENT_SECRET: { secretKeyRef: { name: "paperless-proxy", key: "oidc_secret" } },
 
                                 OAUTH2_PROXY_EMAIL_DOMAINS: "*",
-                                OAUTH2_PROXY_ALLOWED_GROUPS: "zarzad",
+                                OAUTH2_PROXY_ALLOWED_GROUPS: "zarzad,paperless-admin",
 
                                 # Security considerations:
                                 #