diff --git a/ticdc/troubleshoot-ticdc.md b/ticdc/troubleshoot-ticdc.md
index 351da4a9223cf..40921ce072a4e 100644
--- a/ticdc/troubleshoot-ticdc.md
+++ b/ticdc/troubleshoot-ticdc.md
@@ -398,3 +398,19 @@ If you want to skip this DDL statement that goes wrong, set the start-ts of the
 cdc cli changefeed update -c test-cf --pd=http://10.0.10.25:2379 --start-ts 415241823337054210
 cdc cli changefeed resume -c test-cf --pd=http://10.0.10.25:2379
 ```
+
+## When the sink of the replication downstream is TiDB or MySQL, what permissions do users of the downstream database need?
+
+When the sink is TiDB or MySQL, the users of the downstream database need the following permissions:
+
+- `Select`
+- `Index`
+- `Insert`
+- `Update`
+- `Delete`
+- `Create`
+- `Drop`
+- `Alter`
+- `Create View`
+
+If you need to replicate `recover table` to the downstream TiDB, the `Super` permission is required.