diff --git a/tasks/install_subapp.yml b/tasks/install_subapp.yml
index 1cee9d12028ab9798d3ea5e8563e5f7a71800d02..bad08ec8da6ce882fffed1229988223d8a16e96f 100644
--- a/tasks/install_subapp.yml
+++ b/tasks/install_subapp.yml
@@ -60,7 +60,7 @@
     dest: "/etc/systemd/user/{{ item }}"
     owner: "{{ vault_subapp_vars.files.subapp.owner }}"
     group: "{{ vault_subapp_vars.files.subapp.group }}"
-    mode: "{{ vault_subapp_vars.files.subapp.mode | default('0400') }}"
+    mode: "0644"
   loop:
     - "disapp.service"
     - "subapp.service"