diff --git a/library/Icinga/Authentication/AdmissionLoader.php b/library/Icinga/Authentication/AdmissionLoader.php
index 56653824e..0f5a641c4 100644
--- a/library/Icinga/Authentication/AdmissionLoader.php
+++ b/library/Icinga/Authentication/AdmissionLoader.php
@@ -18,32 +18,32 @@ use Icinga\Util\StringHelper;
 class AdmissionLoader
 {
     const LEGACY_PERMISSIONS = [
-        'admin'                                 => 'application/announcements',
-        'application/stacktraces'               => 'user/application/stacktraces',
-        'application/share/navigation'          => 'user/share/navigation',
+        'admin'                               => 'application/announcements',
+        'application/stacktraces'             => 'user/application/stacktraces',
+        'application/share/navigation'        => 'user/share/navigation',
         // Migrating config/application/* would include config/modules, so that's skipped
         //'config/application/*'                  => 'config/*',
-        'config/application/general'            => 'config/general',
-        'config/application/resources'          => 'config/resources',
-        'config/application/navigation'         => 'config/navigation',
-        'config/application/userbackend'        => 'config/access-control/users',
-        'config/application/usergroupbackend'   => 'config/access-control/groups',
-        'config/authentication/*'               => 'config/access-control/*',
-        'config/authentication/users/*'         => 'config/access-control/users',
-        'config/authentication/users/show'      => 'config/access-control/users',
-        'config/authentication/users/add'       => 'config/access-control/users',
-        'config/authentication/users/edit'      => 'config/access-control/users',
-        'config/authentication/users/remove'    => 'config/access-control/users',
-        'config/authentication/groups/*'        => 'config/access-control/groups',
-        'config/authentication/groups/show'     => 'config/access-control/groups',
-        'config/authentication/groups/edit'     => 'config/access-control/groups',
-        'config/authentication/groups/add'      => 'config/access-control/groups',
-        'config/authentication/groups/remove'   => 'config/access-control/groups',
-        'config/authentication/roles/*'         => 'config/access-control/roles',
-        'config/authentication/roles/show'      => 'config/access-control/roles',
-        'config/authentication/roles/add'       => 'config/access-control/roles',
-        'config/authentication/roles/edit'      => 'config/access-control/roles',
-        'config/authentication/roles/remove'    => 'config/access-control/roles'
+        'config/application/general'          => 'config/general',
+        'config/application/resources'        => 'config/resources',
+        'config/application/navigation'       => 'config/navigation',
+        'config/application/userbackend'      => 'config/access-control/users',
+        'config/application/usergroupbackend' => 'config/access-control/groups',
+        'config/authentication/*'             => 'config/access-control/*',
+        'config/authentication/users/*'       => 'config/access-control/users',
+        'config/authentication/users/show'    => 'config/access-control/users',
+        'config/authentication/users/add'     => 'config/access-control/users',
+        'config/authentication/users/edit'    => 'config/access-control/users',
+        'config/authentication/users/remove'  => 'config/access-control/users',
+        'config/authentication/groups/*'      => 'config/access-control/groups',
+        'config/authentication/groups/show'   => 'config/access-control/groups',
+        'config/authentication/groups/edit'   => 'config/access-control/groups',
+        'config/authentication/groups/add'    => 'config/access-control/groups',
+        'config/authentication/groups/remove' => 'config/access-control/groups',
+        'config/authentication/roles/*'       => 'config/access-control/roles',
+        'config/authentication/roles/show'    => 'config/access-control/roles',
+        'config/authentication/roles/add'     => 'config/access-control/roles',
+        'config/authentication/roles/edit'    => 'config/access-control/roles',
+        'config/authentication/roles/remove'  => 'config/access-control/roles'
     ];
 
     /** @var Role[] */