diff --git a/deployment/metrics/collectd-container-puppet.yaml b/deployment/metrics/collectd-container-puppet.yaml
index e6797b8d75..12b860c151 100644
--- a/deployment/metrics/collectd-container-puppet.yaml
+++ b/deployment/metrics/collectd-container-puppet.yaml
@@ -572,6 +572,16 @@ outputs:
               mode: "0755"
               content: { get_file: ../../container_config_scripts/monitoring/collectd_check_health.py }
       docker_config:
+        step_2:
+          if:
+            - {get_param: CollectdEnableSensubility}
+            - collectd_init_perm:
+                image: {get_attr: [RoleParametersValue, value, ContainerCollectdImage]}
+                net: none
+                user: root
+                volumes:
+                  - /run:/run:rw
+                command: ['setfacl', '-R', '-m', 'u:collectd:rwx', '/run/podman']
         step_3:
           collectd:
             image: {get_attr: [RoleParametersValue, value, ContainerCollectdImage]}
@@ -637,11 +647,6 @@ outputs:
                   service:
                     name: rsyslog
                     state: restarted
-        - name: add access to podman to collectd user
-          ansible.builtin.shell: sudo podman exec -it collectd setfacl -R -m u:collectd:rwx /run/podman
-          when:
-            - enable_sensubility
-            - step|int == 4
       host_prep_tasks:
         - name: create persistent directories
           file: