diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
index b5fd2362f2..83e40dc3e1 100644
--- a/inventory/group_vars/bastion
+++ b/inventory/group_vars/bastion
@@ -25,3 +25,8 @@ fas_client_groups: sysadmin-ask, sysadmin-web, sysadmin-main, sysadmin-cvs, sysa
 # This is a postfix gateway. This will pick up gateway postfix config in base
 #
 postfix_group: gateway
+
+#
+# Set this to get fasclient cron to make the aliases file
+#
+fas_aliases: true
diff --git a/roles/fas_client/tasks/main.yml b/roles/fas_client/tasks/main.yml
index 755f24275e..f2cb8305f1 100644
--- a/roles/fas_client/tasks/main.yml
+++ b/roles/fas_client/tasks/main.yml
@@ -79,7 +79,7 @@
   tags:
   - config
   - fas_client
-  when: postfix_group == 'gateway'
+  when: fas_aliases is defined
 
 - name: run fas_client only if we just installed
   command: fasClient -if creates=/var/db/shadow.db