diff --git a/ansible/roles/sahara/templates/sahara-api.json.j2 b/ansible/roles/sahara/templates/sahara-api.json.j2
index 73a0c983d8..f09335a36a 100644
--- a/ansible/roles/sahara/templates/sahara-api.json.j2
+++ b/ansible/roles/sahara/templates/sahara-api.json.j2
@@ -7,5 +7,17 @@
             "owner": "sahara",
             "perm": "0600"
         }
+    ],
+    "permissions": [
+        {
+            "path": "/var/lib/sahara",
+            "owner: "sahara:sahara",
+            "recurse": true
+        },
+        {
+            "path": "/var/log/kolla/sahara",
+            "owner": "sahara:sahara",
+            "recurse": true
+        }
     ]
 }
diff --git a/ansible/roles/sahara/templates/sahara-engine.json.j2 b/ansible/roles/sahara/templates/sahara-engine.json.j2
index f7ac43e1c3..5b3239142c 100644
--- a/ansible/roles/sahara/templates/sahara-engine.json.j2
+++ b/ansible/roles/sahara/templates/sahara-engine.json.j2
@@ -7,5 +7,17 @@
             "owner": "sahara",
             "perm": "0600"
         }
+    ],
+    "permissions": [
+        {
+            "path": "/var/lib/sahara",
+            "owner: "sahara:sahara",
+            "recurse": true
+        },
+        {
+            "path": "/var/log/kolla/sahara",
+            "owner": "sahara:sahara",
+            "recurse": true
+        }
     ]
 }