diff --git a/doc/sources/admin/checkuser.rst b/doc/sources/admin/checkuser.rst
index 004d9e4a2..5f39aeb6e 100644
--- a/doc/sources/admin/checkuser.rst
+++ b/doc/sources/admin/checkuser.rst
@@ -16,6 +16,8 @@ Just enable it in the manager (section “plugins”).
    -  **Activation**: Enable / Disable this plugin
    -  **Identities use rule**: Rule to define which profiles can be
       displayed (by example: ``!$anonymous``)
+   -  **Unrestricted users rule**: Rule to define which users can check
+      ALL users. ``Identities use rule`` is bypassed.
    -  **Hidden attributes**: Attributes not displayed
    -  **Attributes used for searching sessions**: User's attributes used
       for searching sessions in backend if ``whatToTrace`` fails. Useful
diff --git a/doc/sources/admin/contextswitching.rst b/doc/sources/admin/contextswitching.rst
index 1f74f4bad..5a1adcda3 100644
--- a/doc/sources/admin/contextswitching.rst
+++ b/doc/sources/admin/contextswitching.rst
@@ -19,6 +19,8 @@ can be forbidden to assume.
    -  **Identities use rule**: Rule to define which identities can be
       assumed. Useful to prevent impersonation of certain sensitive
       identities like CEO, administrators or anonymous/protected users.
+   -  **Unrestricted users rule**: Rule to define which users can switch
+      context of ALL users. ``Identities use rule`` is bypassed.
    -  **Stop by logout**: Stop context switching by sending a logout
       request.
 
diff --git a/doc/sources/admin/impersonation.rst b/doc/sources/admin/impersonation.rst
index 99b13840f..1e08e42e4 100644
--- a/doc/sources/admin/impersonation.rst
+++ b/doc/sources/admin/impersonation.rst
@@ -27,6 +27,8 @@ protected from being impersonated.
    -  **Identities use rule**: Rule to define which identities can be
       assumed. Useful to prevent impersonation of certain sensitive
       identities like CEO, administrators or anonymous/protected users
+   -  **Unrestricted users rule**: Rule to define which users can assume
+      ALL users. ``Identities use rule`` is bypassed.
    -  **Hidden attributes**: Attributes not displayed
    -  **Skip empty values**: Do not use empty profile attributes
    -  **Merge spoofed and real SSO groups**: Can be useful for