diff --git a/meshcentral-config-schema.json b/meshcentral-config-schema.json
index 4522b820..0a231b0c 100644
--- a/meshcentral-config-schema.json
+++ b/meshcentral-config-schema.json
@@ -54,6 +54,7 @@
         "agentsInRam": { "type": "boolean", "default": false, "description": "Loads all agent binaries in RAM for faster agent updates." },
         "agentPing": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the agent at x seconds interval and expects a response from the agent." },
         "agentPong": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the agent at x seconds interval." },
+        "orphanAgentUser": { "type": "string", "default": null, "description": "If an agent attempts to connect to a unknown device group, automatically create a new device group and grant access to the specified user. Example: admin" },
         "agentIdleTimeout": { "type": "integer", "minimum": 1 },
         "compression": { "type": "boolean", "default": true, "description": "Enables GZIP compression for web requests." },
         "wscompression": { "type": "boolean", "default": false, "description": "Enables server-side, websocket per-message deflate compression." },
diff --git a/sample-config-advanced.json b/sample-config-advanced.json
index b0a27459..d7b484cb 100644
--- a/sample-config-advanced.json
+++ b/sample-config-advanced.json
@@ -162,6 +162,7 @@
       "_userBlockedIP": "127.0.0.1,::1,192.168.0.100",
       "_agentAllowedIP": "192.168.0.100/24",
       "_agentBlockedIP": "127.0.0.1,::1",
+      "_orphanAgentUser": "admin",
       "___userSessionIdleTimeout__": "Number of user idle minutes before auto-disconnect",
       "_userSessionIdleTimeout": 30,
       "__userConsentFlags__": "Set to: 1 for desktop, 2 for terminal, 3 for files, 7 for all",