add sudo examples

admin-guide/puppet/profiles/aaa.rst

@@ -218,6 +218,13 @@ debug level can be changed at runtime using :manpage:`sss_debuglevel(8)`.
 ~~~~~~~~~~~~~~
 
 A list of strings taken from Hiera containing additional sudo rules.
+Example::
+
+  aaa::sudo_rules:
+    - 'ALL ALL=(ALL) NOPASSWD: /usr/local/bin/add_eaccount.sh'
+    - 'DETGROUP ALL= NOPASSWD: /bin/systemctl'
+    - 'DETGROUP ALL=(ALL) NOPASSWD: /usr/sbin/tcpdump'
+
 
 
 ``support_afs``