diff --git a/doc/Extensions/Authentication.md b/doc/Extensions/Authentication.md
index adafa6526..481809811 100644
--- a/doc/Extensions/Authentication.md
+++ b/doc/Extensions/Authentication.md
@@ -137,6 +137,8 @@ If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authentica
 > Cleanup of old accounts is done using the authlog. You will need to set the cleanup date for when old accounts will be purged which will happen AUTOMATICALLY.
 > Please ensure that you set the $config['authlog_purge'] value to be greater than $config['active_directory]['users_purge'] otherwise old users won't be removed.
 
+```$config['auth_ad_groups']['<ad-admingroup>']['level'] = 10``` defines the active directory group which gets admin privileges at login. ```$config['auth_ad_groups']['<ad-usergroup>']['level']   = 7``` defines the group with user privileges after login.
+
 ##### Sample configuration
 
 ```
@@ -144,8 +146,8 @@ $config['auth_ad_url']                      = "ldaps://your-domain.controll.er";
 $config['auth_ad_check_certificates']       = 1; // or 0
 $config['auth_ad_domain']                   = "your-domain.com";
 $config['auth_ad_base_dn']                  = "dc=your-domain,dc=com";
-$config['auth_ad_groups']['admin']['level'] = 10;
-$config['auth_ad_groups']['pfy']['level']   = 7;
+$config['auth_ad_groups']['<ad-admingroup>']['level'] = 10;
+$config['auth_ad_groups']['<ad-usergroup>']['level']   = 7;
 $config['auth_ad_require_groupmembership']  = 0;
 $config['active_directory']['users_purge']  = 14;//Purge users who haven't logged in for 14 days.
 ```