diff --git a/src/dbus.c b/src/dbus.c
index 7e6d65e2c8..a14dbda9d2 100644
--- a/src/dbus.c
+++ b/src/dbus.c
@@ -397,6 +397,8 @@ static DBusHandlerResult api_bus_message_filter(DBusConnection  *connection, DBu
                         if (r < 0) {
                                 const char *id, *text;
 
+                                log_warning("D-Bus activation failed for %s: %s", name, strerror(-r));
+
                                 if (!(reply = dbus_message_new_signal("/org/freedesktop/systemd1", "org.freedesktop.systemd1.Activator", "ActivationFailure")))
                                         goto oom;
 
diff --git a/src/org.freedesktop.systemd1.conf b/src/org.freedesktop.systemd1.conf
index 377e001dee..831df59d53 100644
--- a/src/org.freedesktop.systemd1.conf
+++ b/src/org.freedesktop.systemd1.conf
@@ -16,8 +16,13 @@
         <policy user="root">
                 <allow own="org.freedesktop.systemd1"/>
 
+                <!-- Root clients can do everything -->
                 <allow send_destination="org.freedesktop.systemd1"/>
                 <allow receive_sender="org.freedesktop.systemd1"/>
+
+                <!-- systemd may receive activator requests -->
+                <allow receive_interface="org.freedesktop.systemd1.Activator"
+                       receive_member="ActivationRequest"/>
         </policy>
 
         <policy context="default">