diff --git a/tripleo_ansible/roles/tripleo_create_admin/tasks/create_user.yml b/tripleo_ansible/roles/tripleo_create_admin/tasks/create_user.yml
index 9e7f4fbe6..ecc41c153 100644
--- a/tripleo_ansible/roles/tripleo_create_admin/tasks/create_user.yml
+++ b/tripleo_ansible/roles/tripleo_create_admin/tasks/create_user.yml
@@ -26,6 +26,8 @@
     content: |
       {{ tripleo_admin_user }} ALL=(ALL) NOPASSWD:ALL
     mode: 0440
+    owner: root
+    group: root
 
 # workaround for https://bugs.launchpad.net/tripleo/+bug/1917856
 - name: ensure home dir has the right owner/group for user {{ tripleo_admin_user }}