diff --git a/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml b/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
index a203cfd4..0bc62231 100644
--- a/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
+++ b/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
@@ -8,6 +8,9 @@
   template:
     src: instances.yml.j2
     dest: "{{ node_certs_source }}/instances.yml"
+    owner: root
+    group: root
+    mode: 0644
     force: no
   register: instances_file_exists
   tags: