diff --git a/browbeat-config.yaml b/browbeat-config.yaml
index 3ea180612..5c3796f29 100644
--- a/browbeat-config.yaml
+++ b/browbeat-config.yaml
@@ -666,3 +666,10 @@ workloads:
         share_type: default
         share_proto: "nfs"
         file: rally/manila/create-share-and-extend.yaml
+      - name: create-share-allow-and-deny-access
+        enabled: true
+        share_type: default
+        share_proto: "nfs"
+        access: "127.0.0.1"
+        access_type: "ip"
+        file: rally/manila/create-share-allow-and-deny-access.yml
diff --git a/rally/manila/create-share-allow-and-deny-access.yml b/rally/manila/create-share-allow-and-deny-access.yml
new file mode 100644
index 000000000..238cc95f5
--- /dev/null
+++ b/rally/manila/create-share-allow-and-deny-access.yml
@@ -0,0 +1,29 @@
+{% set sla_max_avg_duration = sla_max_avg_duration or 60 %}
+{% set sla_max_failure = sla_max_failure or 0 %}
+{% set sla_max_seconds = sla_max_seconds or 60 %}
+---
+  ManilaShares.create_share_then_allow_and_deny_access:
+    -
+      args:
+        share_proto: "{{ share_proto }}"
+        share_type: {{ share_type }}
+        size: 1
+        access: "{{ access }}"
+        access_type: "{{ access_type }}"
+      runner:
+        type: "constant"
+        times: {{ times }}
+        concurrency: {{ concurrency }}
+      context:
+        quotas:
+          manila:
+            shares: -1
+            gigabytes: -1
+        users:
+          tenants: 2
+          users_per_tenant: 1
+      sla:
+        max_avg_duration: {{ sla_max_avg_duration }}
+        max_seconds_per_iteration: {{ sla_max_seconds }}
+        failure_rate:
+          max: {{ sla_max_failure }}