diff --git a/roles/ldap_server/tasks/main.yml b/roles/ldap_server/tasks/main.yml
index 7fe8698a44f9d7f605e841711ffffce3c5db99d9..63e6860f73bf6e14429b76cd27ad2d42a974804f 100644
--- a/roles/ldap_server/tasks/main.yml
+++ b/roles/ldap_server/tasks/main.yml
@@ -9,6 +9,9 @@
 - name: Install slapd
   apt: name=slapd state=installed
 
+- name: Allow OpenLDAP user to traverse the directory with TLS private keys
+  user: name=openldap append=yes groups=ssl-cert
+
 - name: Install Python LDAP bindings
   apt: name=python-ldap state=installed