diff --git a/sp-modules/gitea/module.nix b/sp-modules/gitea/module.nix
index 9952f9d..b1e39a1 100644
--- a/sp-modules/gitea/module.nix
+++ b/sp-modules/gitea/module.nix
@@ -374,6 +374,10 @@ in
         enablePkce = false; # FIXME maybe Forgejo supports PKCE?
         linuxUserOfClient = linuxUserOfService;
         linuxGroupOfClient = linuxGroupOfService;
+        claimMaps.groups = {
+          joinType = "array";
+          valuesByGroup.${adminsGroup} = [ "admins" ];
+        };
       };
     })
   ]);