diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te
index c95d491ce..2700290f0 100644
--- a/policy/modules/roles/staff.te
+++ b/policy/modules/roles/staff.te
@@ -60,6 +60,10 @@ optional_policy(`
 	syncthing_role(staff_r, staff_t)
 ')
 
+optional_policy(`
+	virt_stream_connect(staff_t)
+')
+
 optional_policy(`
 	vlock_run(staff_t, staff_r)
 ')