diff --git a/rsyslog/map.jinja b/rsyslog/map.jinja
index 200df2d..7d4b18d 100644
--- a/rsyslog/map.jinja
+++ b/rsyslog/map.jinja
@@ -89,6 +89,8 @@
   msg_reduction: false
   manage_file_perms: true
   perm_dir: "0755"
+  run_user: root
+  run_group: root
   rsyslog_d: /etc/rsyslog.d
   modules:
   - imjournal