diff --git a/handlers/main.yml b/handlers/main.yml
index 3d358b7e..7505b66b 100644
--- a/handlers/main.yml
+++ b/handlers/main.yml
@@ -64,6 +64,9 @@
   copy:
     src: "{{ neutron_conf_dir }}/policy.json-{{ neutron_venv_tag }}"
     dest: "{{ neutron_conf_dir }}/policy.json"
+    owner: "root"
+    group: "{{ neutron_system_group_name }}"
+    mode: "0640"
     remote_src: yes
 
 - name: Start services