diff --git a/README-user.md b/README-user.md
index 528f0998ddd15efcc3aa138e9655fce40638d250..e7a934bad59b3864ae066b5f584897254a20904b 100644
--- a/README-user.md
+++ b/README-user.md
@@ -332,7 +332,7 @@ Variable | Description | Required
 `email` | List of email address strings. | no
 `principal` \| `principalnam` \| `krbprincipalname` | The kerberos principal sptring. | no
 `principalexpiration` \| `krbprincipalexpiration` | The kerberos principal expiration date. Possible formats: `YYYYMMddHHmmssZ`, `YYYY-MM-ddTHH:mm:ssZ`, `YYYY-MM-ddTHH:mmZ`, `YYYY-MM-ddZ`, `YYYY-MM-dd HH:mm:ssZ` or `YYYY-MM-dd HH:mmZ`. The trailing 'Z' can be skipped. | no
-`passwordexpiration` \| `krbpasswordexpiration` | The kerberos password expiration date. Possible formats: `YYYYMMddHHmmssZ`, `YYYY-MM-ddTHH:mm:ssZ`, `YYYY-MM-ddTHH:mmZ`, `YYYY-MM-ddZ`, `YYYY-MM-dd HH:mm:ssZ` or `YYYY-MM-dd HH:mmZ`. The trailing 'Z' can be skipped. | no
+`passwordexpiration` \| `krbpasswordexpiration` | The kerberos password expiration date. Possible formats: `YYYYMMddHHmmssZ`, `YYYY-MM-ddTHH:mm:ssZ`, `YYYY-MM-ddTHH:mmZ`, `YYYY-MM-ddZ`, `YYYY-MM-dd HH:mm:ssZ` or `YYYY-MM-dd HH:mmZ`. The trailing 'Z' can be skipped. Only usable with IPA versions 4.7 and up. | no
 `password` | The user password string. | no
 `random` | Generate a random user password | no
 `uid` \| `uidnumber` | The UID integer. | no
diff --git a/plugins/modules/ipauser.py b/plugins/modules/ipauser.py
index 4a25ed7b14853715e5963b7a50168667853d2f7d..9d4574f0e978fdd50ed85d1c169d8c3d92a2d199 100644
--- a/plugins/modules/ipauser.py
+++ b/plugins/modules/ipauser.py
@@ -92,6 +92,7 @@ options:
         - (possible formats: YYYYMMddHHmmssZ, YYYY-MM-ddTHH:mm:ssZ,
         - YYYY-MM-ddTHH:mmZ, YYYY-MM-ddZ, YYYY-MM-dd HH:mm:ssZ,
         - YYYY-MM-dd HH:mmZ) The trailing 'Z' can be skipped.
+        - Only usable with IPA versions 4.7 and up.
         required: false
         aliases: ["krbpasswordexpiration"]
       password:
@@ -247,6 +248,7 @@ options:
     - (possible formats: YYYYMMddHHmmssZ, YYYY-MM-ddTHH:mm:ssZ,
     - YYYY-MM-ddTHH:mmZ, YYYY-MM-ddZ, YYYY-MM-dd HH:mm:ssZ,
     - YYYY-MM-dd HH:mmZ) The trailing 'Z' can be skipped.
+    - Only usable with IPA versions 4.7 and up.
     required: false
     aliases: ["krbpasswordexpiration"]
   password: