diff --git a/apparmor.d/groups/utils/lspci b/apparmor.d/groups/utils/lspci
index 0ae22a03a..63a2d50ab 100644
--- a/apparmor.d/groups/utils/lspci
+++ b/apparmor.d/groups/utils/lspci
@@ -13,6 +13,8 @@ profile lspci @{exec_path} flags=(attach_disconnected) {
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
+  capability sys_admin,
+
   @{exec_path} mr,
 
   /usr/share/hwdata/pci.ids r,