diff --git a/README.md b/README.md
index 29cb680..fc45948 100644
--- a/README.md
+++ b/README.md
@@ -34,7 +34,7 @@ Brought to you by an inclusive community under the umbrella of Codeberg e.V., a
 - Customize HTML templates, static files and many others.
 
 
-**Shipped version:** 1.19.3-0~ynh4
+**Shipped version:** 1.19.3-0~ynh5
 
 ## Screenshots
 
diff --git a/README_fr.md b/README_fr.md
index 11f17db..e3788f5 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -34,7 +34,7 @@ Brought to you by an inclusive community under the umbrella of Codeberg e.V., a
 - Customize HTML templates, static files and many others.
 
 
-**Version incluse :** 1.19.3-0~ynh4
+**Version incluse :** 1.19.3-0~ynh5
 
 ## Captures d’écran
 
diff --git a/doc/ADMIN.md b/doc/ADMIN.md
index 114d6d6..695dc49 100644
--- a/doc/ADMIN.md
+++ b/doc/ADMIN.md
@@ -4,6 +4,8 @@
 In order to allow access to Forgejo admin section, YunoHost users are automaticaly synchronized with Forgejo's.  
 You can use «Forgejo (admin)» permission to manage which user is considered as forgejo admin.
 
+The «forgejo (api)» permission must be set to «Visitors» group to allow user synchronization via an API call.
+
 **Known issue** : when a user is added to a group (e.g. the one with «Forgejo (admin)» permission), the synchronization is not triggered by YunoHost. You have to update a user (without any modification) to trigger it. (https://github.com/YunoHost/issues/issues/2213)
 
 ### Notes on SSH usage
diff --git a/manifest.toml b/manifest.toml
index 23cc914..0bd8c46 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -5,7 +5,7 @@ name = "Forgejo"
 description.en = "Lightweight software forge"
 description.fr = "Forge logiciel légère"
 
-version = "1.19.3-0~ynh4"
+version = "1.19.3-0~ynh5"
 
 maintainers = ["Emmanuel Averty"]
 
@@ -71,11 +71,15 @@ ram.runtime = "2G"
     [resources.permissions]
     main.url = "/"
 
-    admin.allowed = "admins"
     admin.show_tile = false
     admin.auth_header = false
     admin.protected = true
 
+    api.url = "/api"
+    api.show_tile = false
+    api.allowed = "visitors"
+    api.auth_header = false
+
     [resources.apt]
     packages = "postgresql"