diff --git a/barbican/server.sls b/barbican/server.sls
index f31fbcf..f242e35 100644
--- a/barbican/server.sls
+++ b/barbican/server.sls
@@ -13,6 +13,8 @@
   file.managed:
   - source: salt://barbican/files/{{ server.version }}/barbican.conf.{{ grains.os_family }}
   - template: jinja
+  - mode: 0640
+  - group: barbican
   - require:
     - pkg: barbican_server_packages
 
@@ -47,7 +49,8 @@
 
 /etc/barbican/logging.conf:
   file.managed:
-    - user: barbican
+    - mode: 0640
+    - user: root
     - group: barbican
     - source: salt://oslo_templates/files/logging/_logging.conf
     - template: jinja