diff --git a/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml b/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
index 6d376e7a..6844dd5e 100755
--- a/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
+++ b/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
@@ -69,7 +69,7 @@
     dest: /etc/elasticsearch/jvm.options.d/disabledlog4j.options
     owner: root
     group: elasticsearch
-    mode: 0644
+    mode: 2750
     force: yes
   notify: restart elasticsearch
   tags: install
diff --git a/roles/opendistro/opendistro-elasticsearch/tasks/main.yml b/roles/opendistro/opendistro-elasticsearch/tasks/main.yml
index 42231df0..cc37efad 100644
--- a/roles/opendistro/opendistro-elasticsearch/tasks/main.yml
+++ b/roles/opendistro/opendistro-elasticsearch/tasks/main.yml
@@ -61,7 +61,7 @@
         dest: /etc/elasticsearch/jvm.options.d/disabledlog4j.options
         owner: root
         group: elasticsearch
-        mode: 0644
+        mode: 2750
         force: yes
       notify: restart elasticsearch
       tags: install