diff --git a/data/dbus-policy/com.revolutionpi.middleware1.conf b/data/dbus-policy/com.revolutionpi.middleware1.conf
new file mode 100644
index 0000000..0118123
--- /dev/null
+++ b/data/dbus-policy/com.revolutionpi.middleware1.conf
@@ -0,0 +1,22 @@
+<!-- /etc/dbus-1/system.d/revpi-middleware.conf -->
+<busconfig>
+    <!-- Allow full access to root as the bus owner -->
+    <policy user="root">
+        <allow own="com.revolutionpi.middleware1"/>
+        <allow send_destination="com.revolutionpi.middleware1"/>
+        <allow receive_sender="com.revolutionpi.middleware1"/>
+    </policy>
+
+    <!-- System group picontrol -->
+    <policy group="picontrol">
+        <allow send_destination="com.revolutionpi.middleware1"
+               send_interface="org.freedesktop.DBus.Introspectable"/>
+        <allow send_destination="com.revolutionpi.middleware1"
+               send_interface="com.revolutionpi.middleware1.picontrol"/>
+    </policy>
+
+    <!-- Standard-Policy -->
+    <policy context="default">
+        <deny send_destination="com.revolutionpi.middleware1"/>
+    </policy>
+</busconfig>