diff --git a/templates/sshd_config.j2 b/templates/sshd_config.j2
index d470406..5a307e8 100644
--- a/templates/sshd_config.j2
+++ b/templates/sshd_config.j2
@@ -117,7 +117,7 @@ UsePAM yes
 {% endif %}
 
 {% if sshd__restrict_groups -%}
-  AllowUsers {{ sshd__allowed_groups|join(' ') }}
+  AllowGroups {{ sshd__allowed_groups|join(' ') }}
 {%- endif %}
 
 # Allow client to pass locale environment variables