diff --git a/branding/tasks/main.yml b/branding/tasks/main.yml
index be363509f2c2df6d90c34694070c2698a7f7be6a..e4e1ca5a02b55043eeed849a80f2a49b17bd7ea4 100644
--- a/branding/tasks/main.yml
+++ b/branding/tasks/main.yml
@@ -46,8 +46,8 @@
     path: /usr/local/share/ca-certificates
     state: directory
     owner: root
-    group: root
-    mode: '0755'
+    group: staff
+    mode: '02775'
     recurse: true
   tags:
     - branding