diff --git a/ansible/roles/config/tasks/main.yml b/ansible/roles/config/tasks/main.yml
index 01346419d..155c7305d 100644
--- a/ansible/roles/config/tasks/main.yml
+++ b/ansible/roles/config/tasks/main.yml
@@ -3,6 +3,8 @@
 - name: gather tendermint public keys
   when: validators == true and tendermint_genesis_file is not defined
   shell: "tendermint show_validator --home /etc/{{service}}/tendermint --log_level error"
+  become: yes
+  become_user: "{{service}}"
   register: pubkeys
   changed_when: false