diff --git a/roles/pvc/tasks/libvirt/bootstrap.yml b/roles/pvc/tasks/libvirt/bootstrap.yml
index d4fc49c..61bfc16 100644
--- a/roles/pvc/tasks/libvirt/bootstrap.yml
+++ b/roles/pvc/tasks/libvirt/bootstrap.yml
@@ -1,3 +1,3 @@
 ---
 - name: create Libvirt keyring
-  command: ceph auth get-or-create client.libvirt mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool=*'
+  command: ceph auth get-or-create client.libvirt mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx'