diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index f50a510..ae8eaae 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -741,6 +741,7 @@ my $privgroups = {
 	],
 	user => [
 	    'VM.Config.CDROM', # change CDROM media
+	    'VM.Config.Cloudinit',
 	    'VM.Console',
 	    'VM.Backup',
 	    'VM.PowerMgmt',