diff --git a/admin-guide/puppet/profiles/aaa.rst b/admin-guide/puppet/profiles/aaa.rst
index 84ab2445..c51cb752 100644
--- a/admin-guide/puppet/profiles/aaa.rst
+++ b/admin-guide/puppet/profiles/aaa.rst
@@ -218,6 +218,13 @@ debug level can be changed at runtime using :manpage:`sss_debuglevel(8)`.
 ~~~~~~~~~~~~~~
 
 A list of strings taken from Hiera containing additional sudo rules.
+Example::
+
+  aaa::sudo_rules:
+    - 'ALL ALL=(ALL) NOPASSWD: /usr/local/bin/add_eaccount.sh'
+    - 'DETGROUP ALL= NOPASSWD: /bin/systemctl'
+    - 'DETGROUP ALL=(ALL) NOPASSWD: /usr/sbin/tcpdump'
+
 
 
 ``support_afs``