Unable to access Intel QSV asic from within SNAP

We are encountering some difficulties in the Plex Media Server snap as it attempts to access the Intel QSV ASIC. Specifically, access to /dev/dri is denied.

Logs reports are:

el/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum audit[8492]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum audit[8492]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum kernel: audit: type=1400 audit(1595363269.780:258): apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum kernel: audit: type=1400 audit(1595363269.780:259): apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum audit[8492]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum audit[15185]: AVC apparmor="DENIED" operation="capable" profile="snap.plexmediaserver.plexmediaserver" pid=15185 comm=506C6578205472616E73636F646572 capability=21  capname="sys_admin"
Jul 21 16:27:49 lizum audit[15185]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=15185 comm=506C6578205472616E73636F646572 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:49 lizum audit[15185]: AVC apparmor="DENIED" operation="capable" profile="snap.plexmediaserver.plexmediaserver" pid=15185 comm=506C6578205472616E73636F646572 capability=21  capname="sys_admin"
Jul 21 16:27:50 lizum audit[15185]: AVC apparmor="DENIED" operation="capable" profile="snap.plexmediaserver.plexmediaserver" pid=15185 comm=506C6578205472616E73636F646572 capability=21  capname="sys_admin"
Jul 21 16:27:50 lizum audit[8492]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=8492 comm=506C6578204D656469612053657276 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:50 lizum audit[15215]: AVC apparmor="DENIED" operation="capable" profile="snap.plexmediaserver.plexmediaserver" pid=15215 comm=506C6578205472616E73636F646572 capability=21  capname="sys_admin"
Jul 21 16:27:50 lizum audit[15215]: AVC apparmor="DENIED" operation="open" profile="snap.plexmediaserver.plexmediaserver" name="/sys/kernel/debug/tracing/trace_marker" pid=15215 comm=506C6578205472616E73636F646572 requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Jul 21 16:27:51 lizum audit[15215]: AVC apparmor="DENIED" operation="capable" profile="snap.plexmediaserver.plexmediaserver" pid=15215 comm=506C6578205472616E73636F646572 capability=21  capname="sys_admin"
[chuck@lizum ~.502]$ 

Might someone be able to point us in a direction?

Some of these accesses are provided by the system-trace interface, perhaps add that to plex snap in the plugs and try again ?