diff --git a/opencontrail/web.sls b/opencontrail/web.sls
index 376ae1c..4b65d35 100644
--- a/opencontrail/web.sls
+++ b/opencontrail/web.sls
@@ -27,6 +27,11 @@
   - source: salt://opencontrail/files/{{ web.version }}/redis_webui.conf
   - template: jinja
   - makedirs: True
+  - mode: 640
+{%- if web.version < 4.0 %}
+  - user: redis
+  - group: redis
+{%- endif %}
 
 {%- if not web.get('config_only', False) %}