diff --git a/admin-guide/authentication.md b/admin-guide/authentication.md
new file mode 100644
index 00000000..2ff29971
--- /dev/null
+++ b/admin-guide/authentication.md
@@ -0,0 +1,4 @@
+# Authentication
+
+```{tableofcontents}
+```
diff --git a/admin-guide/authentication/system_access.md b/admin-guide/authentication/system_access.md
new file mode 100644
index 00000000..1556bc18
--- /dev/null
+++ b/admin-guide/authentication/system_access.md
@@ -0,0 +1,19 @@
+# Giving users and groups access to a system
+A list of users and or groups that can access the system. Members of the groups `aaa:admins:` don't need to be members of `aaa::users:` to access a system.
+
+### Regular access
+Access for ActiveDirectory (AD) user accounts or groups that are non Experiment accounts. (See e account section for that)
+```
+aaa::users:
+  - 'muster_h'
+  - '%unx-project_group'
+```
+
+### Sudo access
+To give root access for AD user accounts or groups via sudo.
+```
+aaa::admins:
+  - 'muster_h'
+  - 'unx-project_group'
+```
+