diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index a5da3b64ff..469a7c8b1d 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -237,7 +237,7 @@
 
 - name: enable journald persistence
   file: path=/var/log/journal state=directory
-        owner=root group=systemd-journal mode=0600
+        owner=root group=systemd-journal mode=2755
   when: ansible_distribution_major_version|int >= 7
   tags:
   - journald