diff --git a/roles/openqa/worker/tasks/tap-setup.yml b/roles/openqa/worker/tasks/tap-setup.yml
index 9e720e0858..0bd280e872 100644
--- a/roles/openqa/worker/tasks/tap-setup.yml
+++ b/roles/openqa/worker/tasks/tap-setup.yml
@@ -18,6 +18,12 @@
 - name: Enable ipv4_forward in sysctl
   sysctl: name=net.ipv4.ip_forward value=1 state=present sysctl_set=yes reload=yes
 
+- name: Set CAP_NET_ADMIN for qemu (needed for it to control tap devices)
+  community.general.capabilities:
+    path: "/usr/bin/qemu-system-{{ ansible_architecture }}"
+    capability: cap_net_admin+ep
+    state: present
+
 - name: Start openvswitch service
   service: name=openvswitch enabled=yes state=started