diff --git a/docs/en/watcher/getting-started.asciidoc b/docs/en/watcher/getting-started.asciidoc
index ddad8e5222c..45b084e88e0 100644
--- a/docs/en/watcher/getting-started.asciidoc
+++ b/docs/en/watcher/getting-started.asciidoc
@@ -211,6 +211,14 @@ DELETE _xpack/watcher/watch/log_error_watch
 // CONSOLE
 // TEST[continued]
 
+[float]
+[[required-security-privileges]]
+=== Required Security Privileges
+To use Watcher, users must have the following security privileges:
+
+* Cluster `manage` privilege. Enables users to access the Watcher APIs.
+* Index `read` privilege on `.watch*` indices. Enables users to read the `.watches` and .`watcher-history-*` indices.
+
 [float]
 [[next-steps]]
 === Where to Go Next