diff --git a/README.md b/README.md
index e950098b..bdb4e040 100644
--- a/README.md
+++ b/README.md
@@ -748,6 +748,16 @@ It is of course also possible to include the password value in the `conninfo`
 string for each node, but this is obviously a security risk and should be
 avoided.
 
+### Separate replication user
+
+In some circumstances it might be desirable to create a dedicated replication-only
+user (in addition to the user who manages the `repmgr` metadata. In this case,
+the replication user should be set in `repmgr.conf` via the parameter
+`replication_user`; `repmgr` will use this value when making replication connections
+and generating `recovery.conf`. This value will also be stored in the `repmgr.nodes`
+table for each node; it no longer needs to be explicitly specified when
+cloning a node or executing `repmgr standby follow`.
+
 
 Setting up cascading replication with repmgr
 --------------------------------------------
diff --git a/doc/changes-in-repmgr4.md b/doc/changes-in-repmgr4.md
index 21546bfc..d95b6cbd 100644
--- a/doc/changes-in-repmgr4.md
+++ b/doc/changes-in-repmgr4.md
@@ -25,10 +25,10 @@ Changed command line options
 
 ### repmgr
 
-- `--replication-user` is now passed when registering the master server (and
-  optionally when registering a standby), *not* during standby clone/follow.
-  The value (defaults to the user in the conninfo string) will be stored in
-  the repmgr metadata for use by  standby clone/follow..
+- `--replication-user` has been deprecated; it has been replaced by the
+  configuration file option `replication_user`.  The value (which defaults
+  to the user in the `conninfo` string) will be stored in the repmgr metadata
+  for use by  standby clone/follow..
 
 - `--recovery-min-apply-delay` is now a configuration file parameter
   `recovery_min_apply_delay, to ensure the setting does not get lost when
diff --git a/repmgr.conf.sample b/repmgr.conf.sample
index a87d47cc..9d2441ac 100644
--- a/repmgr.conf.sample
+++ b/repmgr.conf.sample
@@ -40,6 +40,9 @@
                                         # is not running and there's no other way of determining
                                         # the data directory.
 
+#replication_user                       # User to make replication connections with, if not set defaults
+                                        # to the user defined in "conninfo".
+
 # =============================================================================
 
 # Optional configuration items
@@ -65,6 +68,8 @@
 #recovery_min_apply_delay=              # Ff provided, "recovery_min_apply_delay" in recovery.conf
                                         # will be set to this value.
 
+
+
 #------------------------------------------------------------------------------
 # Logging settings
 #------------------------------------------------------------------------------