diff --git a/roles/bodhi2/backend/tasks/main.yml b/roles/bodhi2/backend/tasks/main.yml
index 04e77f83b9..792d4af6cb 100644
--- a/roles/bodhi2/backend/tasks/main.yml
+++ b/roles/bodhi2/backend/tasks/main.yml
@@ -378,3 +378,8 @@
   template: src=kojiprofile.conf dest=/etc/koji.conf.d/bodhi.conf
   tags:
   - bodhi
+
+- name: Grant fedmsg user read permission to koji keytab file used by bodhi
+  acl: name=/etc/krb5.bodhi_bodhi{{ env_suffix }}.fedoraproject.org.keytab entity=fedmsg etype=user permissions="r" state=present
+  tags:
+  - bodhi