diff --git a/roles/restore_metadata/tasks/main.yml b/roles/restore_metadata/tasks/main.yml
index 74de3d2..5c13946 100644
--- a/roles/restore_metadata/tasks/main.yml
+++ b/roles/restore_metadata/tasks/main.yml
@@ -23,6 +23,7 @@
       get_url:
         url: "{{ atl_backup_manifest_url }}"
         dest: "{{ atl_backup_manifest_dest }}"
+        mode: 0600
       when: atl_backup_manifest_url.scheme != 's3'
 
   when: atl_backup_manifest_url is defined and atl_backup_manifest_url != ''