diff --git a/README.md b/README.md
index 357820e..98481cd 100644
--- a/README.md
+++ b/README.md
@@ -26,7 +26,7 @@ Source at https://projects.torsion.org/witten/mediagoblin-docker
 ## Example
 
 ```console
-docker run --detach --name=mediagoblin \
+$ sudo docker run --detach --name=mediagoblin \
     --env NOTIFICATION_EMAIL=media@example.org \
     --env EMAIL_HOSTNAME=mail.example.org \
     --env EMAIL_PORT=587 \
@@ -39,3 +39,31 @@ docker run --detach --name=mediagoblin \
     --publish 80:80 \
     witten/mediagoblin:latest
 ```
+
+## User management
+
+Since this image is for running a private MediaGoblin server, user
+self-registration is disabled. So, to add a user, first exec into the running
+Docker image:
+
+```console
+$ sudo docker exec -it mediagoblin bash
+```
+
+Where `mediagoblin` is the name of your running Docker container. If you don’t
+know the name to use, try looking in `docker ps` output.
+
+Then, add a user (follow the prompts):
+
+```console
+# su - mediagoblin
+$ gmg --conf_file /app/mediagoblin_local.ini adduser
+```
+
+Finally, if you want to make the new user into an admin user:
+
+```console
+$ gmg --conf_file /app/mediagoblin_local.ini makeadmin username
+```
+
+Where `username` corresponds to the user you added above.