diff --git a/ansible/roles/barbican/templates/barbican-api.json.j2 b/ansible/roles/barbican/templates/barbican-api.json.j2
index fe8ba1b30e..5fbdea25f6 100644
--- a/ansible/roles/barbican/templates/barbican-api.json.j2
+++ b/ansible/roles/barbican/templates/barbican-api.json.j2
@@ -19,5 +19,15 @@
             "owner": "barbican",
             "perm": "0600"
         }
+    ],
+    "permissions": [
+       {
+            "path": "/var/lib/barbican",
+            "owner": "barbican:barbican"
+       },
+       {
+            "path": "/var/log/kolla/barbican",
+            "owner": "barbican:barbican"
+       }
     ]
 }
diff --git a/ansible/roles/barbican/templates/barbican-keystone-listener.json.j2 b/ansible/roles/barbican/templates/barbican-keystone-listener.json.j2
index cb7cb3e210..15fc7b54d9 100644
--- a/ansible/roles/barbican/templates/barbican-keystone-listener.json.j2
+++ b/ansible/roles/barbican/templates/barbican-keystone-listener.json.j2
@@ -7,5 +7,11 @@
             "owner": "barbican",
             "perm": "0600"
         }
+    ],
+    "permissions": [
+        {
+            "path": "/var/log/kolla/barbican",
+            "owner": "barbican:barbican"
+        }
     ]
 }
diff --git a/ansible/roles/barbican/templates/barbican-worker.json.j2 b/ansible/roles/barbican/templates/barbican-worker.json.j2
index 861cd6c7f0..1608df871c 100644
--- a/ansible/roles/barbican/templates/barbican-worker.json.j2
+++ b/ansible/roles/barbican/templates/barbican-worker.json.j2
@@ -7,5 +7,11 @@
             "owner": "barbican",
             "perm": "0600"
         }
+    ],
+    "permissions": [
+        {
+            "path": "/var/log/kolla/barbican",
+            "owner": "barbican:barbican"
+        }
     ]
 }