diff --git a/modules/sysadmin_guide/pages/nagios.adoc b/modules/sysadmin_guide/pages/nagios.adoc
index 2853b4b..12eb437 100644
--- a/modules/sysadmin_guide/pages/nagios.adoc
+++ b/modules/sysadmin_guide/pages/nagios.adoc
@@ -83,6 +83,17 @@ DISK WARNING/CRITICAL/OK - free space: mountpoint freespace(MB) (freespace(%) in
 A message stating "(1% inode=99%)" means that the diskspace is critical
 not the inode usage and is a sign that more diskspace is required.
 
+=== Oncall Handling
+Anyone who is currently oncall should be able to acknowledge alerts and
+hosts in Nagios. Therefore, their username should be added to these lines
+in `roles/nagios_server/templtaes/nagios/configs/cgi.cfg.j2`:
+* `authorized_for_system_commands`
+* `authorized_for_all_service_commands`
+* `authorized_for_all_host_commands`
+
+It is fine for past oncalls to keep these permissions, so no additional
+change is needed at the end of their oncall week.
+
 === Further Reading
 
 * xref:ansible.adoc[Ansible SOP]