diff --git a/src/content/docs/security/permissions.mdx b/src/content/docs/security/permissions.mdx
index 0ad69e56c2..5de78d7145 100644
--- a/src/content/docs/security/permissions.mdx
+++ b/src/content/docs/security/permissions.mdx
@@ -26,6 +26,9 @@ It can enable commands to be accessible in the frontend of a Tauri application.
 It can map scopes to commands and defines which commands are enabled.
 Permissions can enable or deny certain commands, define scopes or combine both.
 
+To grant or deny a permission to your app's window or webview,
+you must reference the permission in a [capability](/security/capabilities/).
+
 Permissions can be grouped as a set under a new identifier.
 This is called a permission set. This allows you to combine scope related permissions
 with command related permissions. It also allows to group or bundle operating