1 files changed, 72 insertions, 0 deletions
diff --git a/doc/administration/raketasks/user_management.md b/doc/administration/raketasks/user_management.md
new file mode 100644
index 00000000000..629d38efc53
--- /dev/null
+++ b/doc/administration/raketasks/user_management.md
@@ -0,0 +1,72 @@
+# User management
+
+## Add user as a developer to all projects
+
+```bash
+# omnibus-gitlab
+sudo gitlab-rake gitlab:import:user_to_projects[username@domain.tld]
+
+# installation from source
+bundle exec rake gitlab:import:user_to_projects[username@domain.tld] RAILS_ENV=production
+```
+
+## Add all users to all projects
+
+Notes:
+
+- admin users are added as masters
+
+```bash
+# omnibus-gitlab
+sudo gitlab-rake gitlab:import:all_users_to_all_projects
+
+# installation from source
+bundle exec rake gitlab:import:all_users_to_all_projects RAILS_ENV=production
+```
+
+## Add user as a developer to all groups
+
+```bash
+# omnibus-gitlab
+sudo gitlab-rake gitlab:import:user_to_groups[username@domain.tld]
+
+# installation from source
+bundle exec rake gitlab:import:user_to_groups[username@domain.tld] RAILS_ENV=production
+```
+
+## Add all users to all groups
+
+Notes:
+
+- admin users are added as owners so they can add additional users to the group
+
+```bash
+# omnibus-gitlab
+sudo gitlab-rake gitlab:import:all_users_to_all_groups
+
+# installation from source
+bundle exec rake gitlab:import:all_users_to_all_groups RAILS_ENV=production
+```
+
+## Maintain tight control over the number of active users on your GitLab installation
+
+- Enable this setting to keep new users blocked until they have been cleared by the admin (default: false).
+
+
+```
+block_auto_created_users: false
+```
+
+## Disable Two-factor Authentication (2FA) for all users
+
+This task will disable 2FA for all users that have it enabled. This can be
+useful if GitLab's `.secret` file has been lost and users are unable to login,
+for example.
+
+```bash
+# omnibus-gitlab
+sudo gitlab-rake gitlab:two_factor:disable_for_all_users
+
+# installation from source
+bundle exec rake gitlab:two_factor:disable_for_all_users RAILS_ENV=production
+```