diff --git a/authelia/configuration.yml b/authelia/configuration.yml
index a3b1a0f..b78e200 100644
--- a/authelia/configuration.yml
+++ b/authelia/configuration.yml
@@ -8,6 +8,10 @@ access_control:
   rules:
   - domain: paperless.pyrocufflink.blue
     policy: two_factor
+    subject:
+    - 'group:Paperless-ngx Users'
+  - domain: paperless.pyrocufflink.blue
+    policy: deny
   - domain: firefly.pyrocufflink.blue
     resources:
     - '^/api/'