diff --git a/wildduck/wildflock.yaml b/wildduck/wildflock.yaml
index 142bb64..7716ff9 100644
--- a/wildduck/wildflock.yaml
+++ b/wildduck/wildflock.yaml
@@ -14,6 +14,9 @@ kind: OIDCGWClient
 metadata:
   name: wildflock
 spec:
+  allowedGroups:
+    - k-space:floor
+    - k-space:friends
   displayName: Wildduck disposable alias generator
   uri: "https://wildflock.k-space.ee/auth-oidc"
   redirectUris: