diff --git a/glance/db/offline_sync.sls b/glance/db/offline_sync.sls
index 79aca0e..49cd902 100644
--- a/glance/db/offline_sync.sls
+++ b/glance/db/offline_sync.sls
@@ -1,5 +1,12 @@
 {%- from "glance/map.jinja" import server with context %}
 
+{#- NOTE(vsaienko): we've changed dbsync runas under glance user and we need to correct permissions for api.log #}
+/var/log/glance/api.log:
+  file.managed:
+  - user: glance
+  - group: glance
+  - onlyif: test -f /var/log/glance/api.log
+
 glance_syncdb:
   cmd.run:
   - name: glance-manage db_sync
@@ -7,6 +14,8 @@
   {%- if grains.get('noservices') or server.get('role', 'primary') == 'secondary' %}
   - onlyif: /bin/false
   {%- endif %}
+  - require:
+    - file: /var/log/glance/api.log
 
 glance_load_metadatafs:
   cmd.run: