diff --git a/manila/_common.sls b/manila/_common.sls
index 383222c..35c9d1d 100644
--- a/manila/_common.sls
+++ b/manila/_common.sls
@@ -16,6 +16,8 @@
   file.managed:
   - source: salt://manila/files/{{ cfg.version }}/manila.conf
   - template: jinja
+  - mode: 0640
+  - group: manila
   - require:
     - pkg: manila_common.pkgs
     - sls: manila._ssl.mysql
diff --git a/manila/api.sls b/manila/api.sls
index 2454a38..ad72dd3 100644
--- a/manila/api.sls
+++ b/manila/api.sls
@@ -26,7 +26,8 @@
     - source: salt://oslo_templates/files/logging/_logging.conf
     - template: jinja
     - makedirs: True
-    - user: manila
+    - mode: 0640
+    - user: root
     - group: manila
     - defaults:
         service_name: manila-api
@@ -86,6 +87,8 @@
   file.managed:
   - source: salt://manila/files/{{ api.version }}/policy.json
   - template: jinja
+  - mode: 0640
+  - group: manila
   - require:
     - pkg: manila_api_packages