diff --git a/metadata/service/file_permissions.yml b/metadata/service/file_permissions.yml
new file mode 100644
index 0000000..52be71c
--- /dev/null
+++ b/metadata/service/file_permissions.yml
@@ -0,0 +1,5 @@
+parameters:
+  heat:
+    directories:
+      /etc/heat:
+        mode: '0750'
\ No newline at end of file
diff --git a/metadata/service/server/cluster.yml b/metadata/service/server/cluster.yml
index 7ebc388..8221271 100644
--- a/metadata/service/server/cluster.yml
+++ b/metadata/service/server/cluster.yml
@@ -2,6 +2,7 @@
 - heat
 classes:
 - service.heat.support
+- service.heat.file_permissions
 parameters:
   _param:
     heat_client_default_endpoint_type: internalURL
diff --git a/metadata/service/server/single.yml b/metadata/service/server/single.yml
index b3c733e..612dff9 100644
--- a/metadata/service/server/single.yml
+++ b/metadata/service/server/single.yml
@@ -2,6 +2,7 @@
 - heat
 classes:
 - service.heat.support
+- service.heat.file_permissions
 parameters:
   _param:
     heat_client_default_endpoint_type: internalURL