diff --git a/recipes/api.rb b/recipes/api.rb
index 6323957..13f1af6 100644
--- a/recipes/api.rb
+++ b/recipes/api.rb
@@ -102,3 +102,11 @@ template "/etc/cinder/api-paste.ini" do
 
   notifies :restart, "service[cinder-api]", :immediately
 end
+
+template "/etc/cinder/policy.json" do
+  source "policy.json.erb"
+  owner  node["cinder"]["user"]
+  group  node["cinder"]["group"]
+  mode   00644
+  notifies :restart, "service[cinder-api]"
+end