diff --git a/ansible/roles/common/templates/heka.json.j2 b/ansible/roles/common/templates/heka.json.j2
index bb2ae35040..4013c8685e 100644
--- a/ansible/roles/common/templates/heka.json.j2
+++ b/ansible/roles/common/templates/heka.json.j2
@@ -101,5 +101,17 @@
         }{% if not loop.last %},{% endif %}
 {% endfor %}
 
+    ],
+    "permissions": [
+        {
+            "path": "/var/cache/hekad",
+            "owner": "heka:heka",
+            "recurse": true
+        },
+        {
+            "path": "/var/lib/kolla/heka",
+            "owner": "heka:heka",
+            "recurse": true
+        }
     ]
 }
diff --git a/ansible/roles/common/templates/kolla-toolbox.json.j2 b/ansible/roles/common/templates/kolla-toolbox.json.j2
index 220022a9da..7f0dc05193 100644
--- a/ansible/roles/common/templates/kolla-toolbox.json.j2
+++ b/ansible/roles/common/templates/kolla-toolbox.json.j2
@@ -1,4 +1,10 @@
 {
     "command": "sleep infinity",
-    "config_files": []
+    "config_files": [],
+    "permissions": [
+        {
+            "path": "/var/log/kolla/ansible.log",
+            "owner": "ansible:ansible"
+        }
+    ]
 }