An exemplary system may allow concurrent access to a device by different virtual machines. In one embodiment, the system receives a request to add a virtual machine (VM) of a plurality of virtual machines to a host, the request identifying a device that is shared by the plurality of virtual machines. The system creates a VM-specific rule for the device based on the VM. The system stores the VM-specific rule for the device in association with the VM.