gitea-pages/admin-guide/configuration/access/system_access.md

Regular and Administrative User Access

Regular Access

Access for ActiveDirectory (AD) user accounts or groups:

aaa::users:
  - 'muster_h'
  - '%unx-project_group'

To limit a login to the physical desktop/console only you can add a :LOCAL suffix like this:

aaa::users:
  - 'muster_h:LOCAL'

Note that administrative users (see below) always have normal access without being explicitely listed in aaa::users.

Administrative (root/sudo) Access

To give root access for AD user accounts or groups via sudo.

aaa::admins:
  - 'muster_h'
  - '%unx-project_group'