diff --git a/doc/configuration.rst b/doc/configuration.rst
index 30a1310..effe7af 100644
--- a/doc/configuration.rst
+++ b/doc/configuration.rst
@@ -286,6 +286,26 @@ communicate with the EventSource server.
 Defaults to: ``0``.
 
 
+Authentication options
+----------------------
+
+ADMIN_GROUP
+~~~~~~~~~~~
+
+List of groups, local or remotes (if the openid server used supports the
+group extension), that are site admin. These admins can regenerate the
+gitolite configuration, the ssh key files, the hook-token for every project
+as well as manage users and groups.
+
+
+PAGURE_ADMIN_USERS
+~~~~~~~~~~~~~~~~~~
+
+List of usernames that are site admin. These admins have the same rights as
+the user in the admin groups (listed above) as well as admin rights to
+every projects hosted on this pagure instance.
+
+
 Optional options
 ----------------
 
diff --git a/files/pagure.cfg.sample b/files/pagure.cfg.sample
index d5c0458..653edb3 100644
--- a/files/pagure.cfg.sample
+++ b/files/pagure.cfg.sample
@@ -19,6 +19,9 @@ DB_URL = 'sqlite:////var/tmp/pagure_dev.sqlite'
 ### The FAS group in which the admin of pagure are
 ADMIN_GROUP = ['sysadmin-main']
 
+### Hard-coded list of global admins
+PAGURE_ADMIN_USERS = []
+
 ### The email address to which the flask.log will send the errors (tracebacks)
 EMAIL_ERROR = 'pingou@pingoured.fr'