diff --git a/command/operator_debug.go b/command/operator_debug.go
index 0ba77e7bd702..ba0dc8cfa76d 100644
--- a/command/operator_debug.go
+++ b/command/operator_debug.go
@@ -58,6 +58,12 @@ Usage: nomad operator debug [options]
   Build an archive containing Nomad cluster configuration and state, and Consul and Vault
   status. Include logs and pprof profiles for selected servers and client nodes.
 
+  If ACLs are enabled, this command will require a token with the 'node:read'
+  capability to run. In order to collect information, the token will also
+  require the 'agent:read' and 'operator:read' capabilities, as well as the
+  'list-jobs' capability for all namespaces. To collect pprof profiles the
+  token will also require 'agent:write', or enable_debug configuration set to true.
+
 General Options:
 
   ` + generalOptionsUsage() + `