diff --git a/metadata/service/file_permissions.yml b/metadata/service/file_permissions.yml
new file mode 100644
index 0000000..c5a7d57
--- /dev/null
+++ b/metadata/service/file_permissions.yml
@@ -0,0 +1,5 @@
+parameters:
+  barbican:
+    directories:
+      /etc/barbican:
+        mode: '0750'
\ No newline at end of file
diff --git a/metadata/service/server/cluster.yml b/metadata/service/server/cluster.yml
index d91492b..be8f6a7 100644
--- a/metadata/service/server/cluster.yml
+++ b/metadata/service/server/cluster.yml
@@ -2,6 +2,7 @@
 - barbican
 classes:
 - service.barbican.support
+- service.barbican.file_permissions
 parameters:
   _param:
     openstack_log_appender: false
diff --git a/metadata/service/server/single.yml b/metadata/service/server/single.yml
index 1099077..2880e65 100644
--- a/metadata/service/server/single.yml
+++ b/metadata/service/server/single.yml
@@ -2,6 +2,7 @@
 - barbican
 classes:
 - service.barbican.support
+- service.barbican.file_permissions
 parameters:
   _param:
     openstack_log_appender: false