diff --git a/roles/ceph-dashboard/tasks/configure_dashboard.yml b/roles/ceph-dashboard/tasks/configure_dashboard.yml
index ba7e57049..d61edd6c8 100644
--- a/roles/ceph-dashboard/tasks/configure_dashboard.yml
+++ b/roles/ceph-dashboard/tasks/configure_dashboard.yml
@@ -20,7 +20,7 @@
     dest: "/etc/ceph/ceph-dashboard.crt"
     owner: root
     group: root
-    mode: 0644
+    mode: 0440
   when:
     - dashboard_crt
     - dashboard_protocol == "https"
@@ -31,7 +31,7 @@
     dest: "/etc/ceph/ceph-dashboard.key"
     owner: root
     group: root
-    mode: 0644
+    mode: 0440
   when:
     - dashboard_key
     - dashboard_protocol == "https"
diff --git a/roles/ceph-grafana/tasks/configure_grafana.yml b/roles/ceph-grafana/tasks/configure_grafana.yml
index 80522e42f..bbb5ab224 100644
--- a/roles/ceph-grafana/tasks/configure_grafana.yml
+++ b/roles/ceph-grafana/tasks/configure_grafana.yml
@@ -49,7 +49,7 @@
   copy:
     src: "{{ grafana_key }}"
     dest: "/etc/grafana/ceph-dashboard.key"
-    mode: 0640
+    mode: 0440
   when:
     - grafana_key
     - dashboard_protocol == "https"