diff --git a/modules/microvm-host.nix b/modules/microvm-host.nix
index 7cd0427c..d3be70d2 100644
--- a/modules/microvm-host.nix
+++ b/modules/microvm-host.nix
@@ -26,6 +26,9 @@
       host.enable = if (options?isoImage) then false else true;
     };
 
+    # allow microvm access to zvol
+    users.users.microvm.extraGroups = [ "disk" ];
+
     systemd.services = {
       "microvm-virtiofsd@" = {
         requires = [ "microvm-zfs-datasets@%i.service" ];