You can use sys-usb only if you have multiple USB controllers available so you can dedicate one of them to dom0 to connect your external USB drive to it. Then you can hide all other USB controllers from dom0 and use them for sys-usb: