diff --git a/group_vars/ansible.yml b/group_vars/ansible.yml
index 6506f1e1..5c2be26a 100644
--- a/group_vars/ansible.yml
+++ b/group_vars/ansible.yml
@@ -7,3 +7,4 @@
     - name: Jinja2
   ### geerlingguy.ansible
   ansible_install_method: pip
+  ansible_install_version_pip: '2.10'
diff --git a/permissions.sh b/permissions.sh
new file mode 100644
index 00000000..4d50fc7c
--- /dev/null
+++ b/permissions.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+sudo chmod 400 /home/mg/ansible/id_rsa_ansible_user
+sudo chmod 400 /home/mg/ansible/vault-pass.yml
+# Datei muss Zeilenende LF haben
diff --git a/playbooks/service/ansible.yml b/playbooks/service/ansible.yml
index c4c4d44c..b97700e9 100644
--- a/playbooks/service/ansible.yml
+++ b/playbooks/service/ansible.yml
@@ -2,5 +2,5 @@
 - hosts: ansible
   roles:
     - { role: geerlingguy.pip, tags: "pip", become: true }
-    - { role: geerlingguy.ansible, tags: "ansible" }
+    - { role: geerlingguy.ansible, tags: "ansible", become: true }
     - { role: mgrote.ansible, tags: "ansible-mg" }
diff --git a/roles/mgrote.install_packages/defaults/main.yml b/roles/mgrote.install_packages/defaults/main.yml
index b0d8b187..62e34a87 100644
--- a/roles/mgrote.install_packages/defaults/main.yml
+++ b/roles/mgrote.install_packages/defaults/main.yml
@@ -20,6 +20,7 @@
     - neofetch
     - ntpdate
     - acl
+    - python3
   programs_only_physical:
     - hddtemp
     - ipmitool