diff --git a/authentik/clusterrolebinding-oidc-group-admin-kube-apiserver.yaml b/authentik/clusterrolebinding-oidc-group-admin-kube-apiserver.yaml
index 1656b20..0f19336 100644
--- a/authentik/clusterrolebinding-oidc-group-admin-kube-apiserver.yaml
+++ b/authentik/clusterrolebinding-oidc-group-admin-kube-apiserver.yaml
@@ -9,3 +9,4 @@ roleRef:
 subjects:
 - kind: Group
   name: oidc:admin-kube-apiserver 
+  apiGroup: rbac.authorization.k8s.io