diff --git a/roles/mgrote_minio_configure/tasks/policy.yml b/roles/mgrote_minio_configure/tasks/policy.yml
index 3dba2db2..fb3f4da0 100644
--- a/roles/mgrote_minio_configure/tasks/policy.yml
+++ b/roles/mgrote_minio_configure/tasks/policy.yml
@@ -12,7 +12,9 @@
   ansible.builtin.template:
     dest: "{{ minio_config_dir }}/{{ item.bucket }}_ro"
     src: policy_ro.j2
-    state: present
+    owner: root
+    group: root
+    mode: '0644'
   loop: "{{ minio_policies }}"
 
 - name: temaplet rw policy files