diff --git a/internal/acl/acl.go b/internal/acl/acl.go
index d1b1bdb..5640fa2 100644
--- a/internal/acl/acl.go
+++ b/internal/acl/acl.go
@@ -79,8 +79,7 @@ func UserFromContext(ctx context.Context, cfg *config.Config) *AuthenticatedUser
 
 	if ok {
 		ret.Username = getMetdataKeyOrEmpty(md, "username")
-		ret.Usergroup = getMetdataKeyOrEmpty(md, "password")
-
+		ret.Usergroup = getMetdataKeyOrEmpty(md, "usergroup")
 	}
 
 	buildUserAcls(cfg, ret)