diff --git a/tasks/glance_post_install.yml b/tasks/glance_post_install.yml
index f9dd0ff5..5becc417 100644
--- a/tasks/glance_post_install.yml
+++ b/tasks/glance_post_install.yml
@@ -17,9 +17,9 @@
   config_template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
-    owner: "{{ glance_system_user_name }}"
+    owner: "root"
     group: "{{ glance_system_group_name }}"
-    mode: "0644"
+    mode: "0640"
     config_overrides: "{{ item.config_overrides }}"
     config_type: "{{ item.config_type }}"
   with_items:
diff --git a/tasks/glance_pre_install.yml b/tasks/glance_pre_install.yml
index 35645e7e..f21c0674 100644
--- a/tasks/glance_pre_install.yml
+++ b/tasks/glance_pre_install.yml
@@ -38,7 +38,7 @@
     mode: "{{ item.mode|default('0755') }}"
   with_items:
     - { path: "/openstack", mode: "0755", owner: "root", group: "root" }
-    - { path: "/etc/glance", mode: "0755" }
+    - { path: "/etc/glance", mode: "0750" }
     - { path: "/var/cache/glance" }
     - { path: "{{ glance_system_user_home }}" }
     - { path: "{{ glance_system_user_home }}/cache/api", mode: "0700" }