diff --git a/README.md b/README.md
index 53d849d..9b45041 100644
--- a/README.md
+++ b/README.md
@@ -238,6 +238,11 @@ system:
 | `password` | string      | --      | User password (required for at least one user)     |
 | `keys`     | list        | `[]`    | SSH public keys                                    |
 | `sudo`     | bool/string | --      | `true` for NOPASSWD ALL, or custom sudoers string  |
+| `groups`   | list        | derived | Supplementary groups; empty means the platform sudo group when `sudo` is set |
+| `shell`    | string      | `/bin/bash` | Login shell                                    |
+| `password_login` | bool  | `false` | Read by the main repository's SSH hardening, ignored here |
+| `uid`      | int         | --      | Read by the main repository's user actions; the bootstrap assigns `1000 + index` |
+| `disabled` | bool        | `false` | Read by the main repository's user actions, ignored here |
 
 Users must be defined in inventory. The dict format enables additive merging across inventory layers with `hash_behaviour=merge`.
 
@@ -544,6 +549,7 @@ On VMware, `device` is resolved on the target from the SCSI address instead: ent
 | ------------- | ------ | ------------------------------------------------------ |
 | `size`        | number | Disk size in GB (required for virtual)                 |
 | `device`      | string | Block device path (required for physical data disks)   |
+| `storage`     | string | Proxmox storage for this disk; empty uses `hypervisor.storage` |
 | `partition`   | string | Derived from `device` during normalization (not user input) |
 | `mount.path`  | string | Mount point (additional disks only)                    |
 | `mount.fstype`| string | `btrfs`, `ext4`, or `xfs`                              |