diff --git a/playbooks/groups/badges-backend.yml b/playbooks/groups/badges-backend.yml
index 20ccecb27d..7460db41f4 100644
--- a/playbooks/groups/badges-backend.yml
+++ b/playbooks/groups/badges-backend.yml
@@ -23,6 +23,11 @@
   - { role: openvpn/client,
        when: env != "staging" }
   - ipa/client
+  - { role: keytab/service,
+      owner_user: fedmsg,
+      owner_group: fedmsg,
+      service: badges-backend,
+      when: env == 'staging' }
   - collectd/base
   - fedmsg/base
   - sudo