diff --git a/molecule/resources/playbooks/prepare.yml b/molecule/resources/playbooks/prepare.yml
index 26d139e466395cfb0aa23abdc09164478a069d10..761d4a95c9184560b68a9c0e349148f321ed6d1b 100644
--- a/molecule/resources/playbooks/prepare.yml
+++ b/molecule/resources/playbooks/prepare.yml
@@ -16,6 +16,7 @@
       owner: dirsrv
       group: dirsrv
       path: "{{ item }}"
+      mode: 0770
     loop:
       - /var/lock/dirsrv/
       - /var/lock/dirsrv/slapd-TEST-LOCAL/
diff --git a/roles/ipaserver/tasks/copy_external_cert.yml b/roles/ipaserver/tasks/copy_external_cert.yml
index 2d394a9687e0564c468265f004c9ae36620de685..84eee2360230340134965d8d626a0381c4dd2d79 100644
--- a/roles/ipaserver/tasks/copy_external_cert.yml
+++ b/roles/ipaserver/tasks/copy_external_cert.yml
@@ -6,6 +6,7 @@
   copy:
     src: "{{ item }}"
     dest: "/root/{{ item | basename }}"
+    mode: preserve
     force: yes
 - name: Install - Extend ipaserver_external_cert_files with "/root/{{ item | basename }}"
   set_fact:
diff --git a/tests/ca-less/install_replica_without_ca.yml b/tests/ca-less/install_replica_without_ca.yml
index 83398b24596cc9be52b156d9d27ec1ff8fc4f18e..dc026220d66cf2a04e3f03551121209c40918063 100644
--- a/tests/ca-less/install_replica_without_ca.yml
+++ b/tests/ca-less/install_replica_without_ca.yml
@@ -48,6 +48,7 @@
       file:
         path: "/root/ca-less-test"
         state: directory
+        mode: 0775
 
     - name: Copy CA certificate
       copy:
diff --git a/tests/ca-less/install_server_without_ca.yml b/tests/ca-less/install_server_without_ca.yml
index ecb609c4fd17593e0352a5b2c37c28465266e394..add0f622ecf3f37aca092c115a39ac2f66085ccf 100644
--- a/tests/ca-less/install_server_without_ca.yml
+++ b/tests/ca-less/install_server_without_ca.yml
@@ -48,6 +48,7 @@
       file:
         path: "/root/ca-less-test"
         state: directory
+        mode: 0775
 
     - name: Copy CA certificate
       copy:
diff --git a/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml b/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml
index 19cea6b866022615a1f40ade9fa24df0bb9864cd..9ab763bd67aa2f7269b7231451d695f6a55dc754 100644
--- a/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml
+++ b/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml
@@ -42,6 +42,7 @@
       src: "{{ groups.ipaserver[0] + '-chain.crt' }}"
       dest: "/root/chain.crt"
       force: yes
+      mode: preserve
 
   roles:
   - role: ipaserver
diff --git a/tests/vault/env_setup.yml b/tests/vault/env_setup.yml
index 4e2d40e84e8cea5cb3cb5e95bf724fd283ecfd7b..69e9cb71589cf49707e549bdc8e432b6f1405b5c 100644
--- a/tests/vault/env_setup.yml
+++ b/tests/vault/env_setup.yml
@@ -20,6 +20,7 @@
     copy:
       src: "{{ playbook_dir }}/{{ item }}"
       dest: "{{ ansible_facts['env'].HOME }}/{{ item }}"
+      mode: 0644
     with_items:
     - A_private.pem
     - A_public.pem