diff --git a/ticdc/ticdc-sink-to-kafka.md b/ticdc/ticdc-sink-to-kafka.md
index fb7c691eb6c0b..8e6533bbd8bae 100644
--- a/ticdc/ticdc-sink-to-kafka.md
+++ b/ticdc/ticdc-sink-to-kafka.md
@@ -135,7 +135,7 @@ The following are examples when using Kafka SASL authentication:
 
     The minimum set of permissions required for TiCDC to function properly is as follows.
 
-    - The `Create` and `Write` permissions for the Topic [resource type](https://docs.confluent.io/platform/current/kafka/authorization.html#resources).
+    - The `Create`, `Write`, and `Describe` permissions for the Topic [resource type](https://docs.confluent.io/platform/current/kafka/authorization.html#resources).
     - The `DescribeConfigs` permission for the Cluster resource type.
 
 ### Integrate TiCDC with Kafka Connect (Confluent Platform)