diff --git a/src/resources/access_control_rule.rs b/src/resources/access_control_rule.rs
index c219af1..c0cf776 100644
--- a/src/resources/access_control_rule.rs
+++ b/src/resources/access_control_rule.rs
@@ -35,6 +35,7 @@ enum AccessPolicy {
 pub struct AccessControlRuleSpec {
     domain: String,
     policy: AccessPolicy,
+    subject: Option<String>,
 }
 
 #[derive(Serialize, Deserialize, Clone, Debug, Hash)]
diff --git a/yaml/rule-test-2.yaml b/yaml/rule-test-2.yaml
index db92459..bf63b57 100644
--- a/yaml/rule-test-2.yaml
+++ b/yaml/rule-test-2.yaml
@@ -5,3 +5,4 @@ metadata:
 spec:
   domain: "test-2.domain"
   policy: one_factor
+  subject: group:lldap_admin