diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index ddad2c7..86c15fd 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -599,6 +599,14 @@ my $privgroups = {
 	user => [],
 	audit => [],
     },
+    Pool => {
+	root => [],
+	admin => [
+	    'Pool.Allocate', # create/delete pools
+	],
+	user => [],
+	audit => [],
+    },
 };
 
 my $valid_privs = {};