# PCI passthrough only works for oneadmin (ONE 5.2)

**URL:** <https://forum.opennebula.io/t/pci-passthrough-only-works-for-oneadmin-one-5-2/3520>\
**Category:** Product Support\
**Created:** [January 4, 2017, 8:58am UTC](https://forum.opennebula.io/t/pci-passthrough-only-works-for-oneadmin-one-5-2/3520 "2017-01-04T08:58:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tunaman](https://avatars.discourse-cdn.com/v4/letter/t/958977/32.png) [@tunaman](https://forum.opennebula.io/u/tunaman)\
**Post date:** [January 4, 2017, 8:58am UTC](https://forum.opennebula.io/t/pci-passthrough-only-works-for-oneadmin-one-5-2/3520/1 "2017-01-04T08:58:18Z")

</div>

Hi,

While we are testing the upgrade from 4.14.2 to 5.2 I ran in to the following problem, it seems that as oneadmin I am able to attach a PCI device (in this case a GPU) to a template but as a normal user it doesn’t work at all. Added to this problem is that I don’t get any feedback from the UI and there is nothing in `/var/log/one/oned.log` which might indicate something is wrong on our side. So it seems to work but the template is not updated with the PCI block entry.

Second thing I did was to check if there were any changes with regards to the ACL’s but I couldn’t find anything there related to PCI devices. Hope that someone can help me here.

---

<div class="post-metadata">

**Author:** ![tunaman](https://avatars.discourse-cdn.com/v4/letter/t/958977/32.png) [@tunaman](https://forum.opennebula.io/u/tunaman)\
**Post date:** [January 4, 2017, 1:43pm UTC](https://forum.opennebula.io/t/pci-passthrough-only-works-for-oneadmin-one-5-2/3520/2 "2017-01-04T13:43:50Z")

</div>

Found the issue, the following was enabled in `/etc/one/oned.conf`

```auto
VM_RESTRICTED_ATTR = "PCI"

```

Maybe add something to the documentation on [http://docs.opennebula.org/5.2/deployment/open\_cloud\_host\_setup/pci\_passthrough.html](http://docs.opennebula.org/5.2/deployment/open_cloud_host_setup/pci_passthrough.html) which links to [http://docs.opennebula.org/5.2/deployment/references/oned\_conf.html?highlight=restricted#restricted-attributes-configuration](http://docs.opennebula.org/5.2/deployment/references/oned_conf.html?highlight=restricted#restricted-attributes-configuration)? And make sure you disable that restriction? And perhaps also throw an error in both the logfile and the UI when you try to add a restricted attribute to your template?