diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 82b3795..2239e14 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -364,6 +364,7 @@ my $privgroups = {
 	    'VM.Config.HWType',
 	    'VM.Config.Options', # covers all other things 
 	    'VM.Allocate', 
+	    'VM.Copy', 
 	    'VM.Migrate',
 	    'VM.Monitor', 
 	    'VM.Snapshot', 
@@ -457,6 +458,8 @@ sub create_roles {
 	    $special_roles->{"PVEAuditor"}->{$p} = 1;
 	}
     }
+
+    $special_roles->{"PVETemplateUser"} = { 'VM.Copy' => 1, 'VM.Audit' => 1 };
 };
 
 create_roles();
diff --git a/README b/README
index f20c4de..53496fe 100644
--- a/README
+++ b/README
@@ -82,6 +82,7 @@ privileges:
 	VM.Console: console access to VM
 	VM.Monitor: access to VM monitor (kvm)
 	VM.Backup: backup/restore VMs
+	VM.Copy: Copy/Clone VM or VM template
 	VM.Audit: view VM config
 
 	VM.Config.XXX: modify VM config