diff --git a/docs/rolereference.rst b/docs/rolereference.rst
index c4af2d60f6a99b927aebdce5a01750027a1353cb..1125c7d74a673d49213e2bec7a456b2c34b3251d 100644
--- a/docs/rolereference.rst
+++ b/docs/rolereference.rst
@@ -15,6 +15,11 @@ partition. A number of common parameters can be provided.
 Parameters
 ~~~~~~~~~~
 
+**ansible_key** (string, mandatory)
+  SSH public key that should be deployed to authorized_keys truststore for
+  operating system user ``root``. This is necessary for the bootstrap process
+  to work since Debian Jessie does not allow password-based logins for root.
+
 **preseed_directory** (mandatory)
     Destination directory where the preseed files should be stored.
 
@@ -146,6 +151,9 @@ The role implements the following:
   SSH access).
 * Configures sudo to allow operating system user ``ansible`` to run sudo
   commands without password authentication.
+* Removes the Ansible user's key from the list of authorized keys for user root
+  at the end of bootstrap process. This key was necessary only for the bootstrap
+  process.
 
 
 Parameters