diff --git a/dev-example/test-pool.yaml b/dev-example/test-pool.yaml
index 2ff8d06..43c36b8 100644
--- a/dev-example/test-pool.yaml
+++ b/dev-example/test-pool.yaml
@@ -11,5 +11,3 @@ spec:
   - user: test
     may:
     - accessConsole
-    - start
-    - stop
diff --git a/org.jdrupes.vmoperator.vmaccess/src/org/jdrupes/vmoperator/vmaccess/VmAccess.java b/org.jdrupes.vmoperator.vmaccess/src/org/jdrupes/vmoperator/vmaccess/VmAccess.java
index 4ac3397..e6d4e58 100644
--- a/org.jdrupes.vmoperator.vmaccess/src/org/jdrupes/vmoperator/vmaccess/VmAccess.java
+++ b/org.jdrupes.vmoperator.vmaccess/src/org/jdrupes/vmoperator/vmaccess/VmAccess.java
@@ -676,7 +676,9 @@ public class VmAccess extends FreeMarkerConlet<VmAccess.ResourceModel> {
                         continue;
                     }
                 }
-                updateVmDef(connection, model.get(), vmDef);
+
+                // Full update because permissions may have changed
+                updatePreview(connection, model.get(), vmDef);
             }
         }
     }