diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice
index 18f5b0240..f3c2a2f38 100644
--- a/profiles/apparmor.d/abstractions/nameservice
+++ b/profiles/apparmor.d/abstractions/nameservice
@@ -58,6 +58,9 @@
   @{PROC}/@{pid}/net/psched r,
   @{etc_ro}/libnl-*/classid r,
 
+  # user/group resolution through kanidm
+  /etc/kanidm/unixd r,
+
   # nis
   include <abstractions/nis>