diff --git a/README.rst b/README.rst
index 17d5c9f..981ccaf 100644
--- a/README.rst
+++ b/README.rst
@@ -108,6 +108,20 @@
         password: password
         virtual_host: '/openstack'
 
+Configuration of policy.json file:
+
+.. code-block:: yaml
+
+  ironic:
+    api:
+      ...
+      api_type: deploy
+      policy:
+        'baremetal:node:create': 'rule:is_admin'
+        'baremetal:node:delete': 'rule:is_admin'
+        # Add key without value to remove line from policy.json
+        'baremetal:node:update':
+
 Enable x509 and ssl communication between Ironic and Galera cluster.
 ---------------------
 By default communication between Ironic and Galera is unsecure.