From 1bb4b4851e84c7cc01be23c9f86529357833ba3d Mon Sep 17 00:00:00 2001
From: Konrad Bucheli <konrad.bucheli@psi.ch>
Date: Mon, 13 Jun 2022 08:46:40 +0200
Subject: [PATCH] add sudo examples

---
 admin-guide/puppet/profiles/aaa.rst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/admin-guide/puppet/profiles/aaa.rst b/admin-guide/puppet/profiles/aaa.rst
index 84ab2445..c51cb752 100644
--- a/admin-guide/puppet/profiles/aaa.rst
+++ b/admin-guide/puppet/profiles/aaa.rst
@@ -218,6 +218,13 @@ debug level can be changed at runtime using :manpage:`sss_debuglevel(8)`.
 ~~~~~~~~~~~~~~
 
 A list of strings taken from Hiera containing additional sudo rules.
+Example::
+
+  aaa::sudo_rules:
+    - 'ALL ALL=(ALL) NOPASSWD: /usr/local/bin/add_eaccount.sh'
+    - 'DETGROUP ALL= NOPASSWD: /bin/systemctl'
+    - 'DETGROUP ALL=(ALL) NOPASSWD: /usr/sbin/tcpdump'
+
 
 
 ``support_afs``