diff --git a/playbooks/groups/notifs-backend.yml b/playbooks/groups/notifs-backend.yml
index 236184b57f..47965b015f 100644
--- a/playbooks/groups/notifs-backend.yml
+++ b/playbooks/groups/notifs-backend.yml
@@ -27,6 +27,11 @@
   #- { role: openvpn/client,
   #    when: env != "staging" }
   - ipa/client
+  - { role: keytab/service,
+      owner_user: daemon,
+      owner_group: daemon,
+      service: fmn-backend@1,
+      when: inventory_hostname.startswith('notifs-backend02.iad2') }
   - nagios_client
   - collectd/base
   - fedmsg/base