diff --git a/README.md b/README.md
index f88a640..2bfe8e4 100644
--- a/README.md
+++ b/README.md
@@ -197,6 +197,12 @@ renders the create account page that is sent to the user:
     POST 
     /deleteAccount
 
+    GET
+    /user                       get all users
+
+    PUT
+    /user/:email/authorities    set authorities for user
+
 ## tests
 
 all flows are tested very clearly using [Cucumber automated tests](https://github.com/OhadR/authentication-flows-js-automation).
@@ -218,6 +224,10 @@ Feel free to open issues here if you have any unclear matter or any other questi
 
 ## versions
 
+### 1.10.0
+
+* add APIs for management - `getAllUsers`, and `setAuthorities`. so hosting app can manage authorization for users. #17
+
 ### 1.9.0
 
 * enable customized CreateAccountInterceptor #18