diff --git a/roles/batcave/tasks/main.yml b/roles/batcave/tasks/main.yml
index bdf78d20a1..68e3ddc8c0 100644
--- a/roles/batcave/tasks/main.yml
+++ b/roles/batcave/tasks/main.yml
@@ -430,7 +430,7 @@
 #
 
 - name: install the ansible_utils/rbac config
-  copy: src={{ private }}/files/rbac/rbac.yaml dest=/etc/ansible_utils/rbac.yaml mode=0500
+  copy: src={{ private }}/files/rbac/rbac.yaml dest=/etc/ansible_utils/rbac.yaml mode=0540 group=sysadmin
   tags:
   - rbac
   - batcave