diff --git a/roles/mbs/common/tasks/main.yml b/roles/mbs/common/tasks/main.yml
index df5312890b..d7ecb0437e 100644
--- a/roles/mbs/common/tasks/main.yml
+++ b/roles/mbs/common/tasks/main.yml
@@ -29,7 +29,7 @@
 - name: copy client secrets
   template: >
     src=client_secrets.json.{{env}} dest=/etc/module-build-service/client_secrets.json
-    owner=root group=apache mode=0640
+    owner=root group=fedmsg mode=0640
   when: inventory_hostname.startswith('mbs-frontend')
   notify:
   - restart apache