diff --git a/engine-clients/src/main/java/io/nosqlbench/engine/clients/grafana/GrafanaMetricsAnnotator.java b/engine-clients/src/main/java/io/nosqlbench/engine/clients/grafana/GrafanaMetricsAnnotator.java
index 8d23039b2..bd2b1502a 100644
--- a/engine-clients/src/main/java/io/nosqlbench/engine/clients/grafana/GrafanaMetricsAnnotator.java
+++ b/engine-clients/src/main/java/io/nosqlbench/engine/clients/grafana/GrafanaMetricsAnnotator.java
@@ -13,6 +13,7 @@ import org.apache.logging.log4j.Logger;
 
 import java.nio.file.Files;
 import java.nio.file.Path;
+import java.nio.file.attribute.PosixFilePermissions;
 import java.util.LinkedHashMap;
 import java.util.Map;
 import java.util.Optional;
@@ -151,6 +152,8 @@ public class GrafanaMetricsAnnotator implements Annotator, ConfigAware {
 
                 String keyName = "nosqlbench-" + nodeId + "-" + System.currentTimeMillis();
                 ApiToken apiToken = apiClient.createApiToken(keyName, "Admin", Long.MAX_VALUE);
+                Files.createDirectories(keyfilePath.getParent(),
+                        PosixFilePermissions.asFileAttribute(PosixFilePermissions.fromString("rwxrwx---")));
                 Files.writeString(keyfilePath, apiToken.getKey());
             } catch (Exception e) {
                 throw new RuntimeException(e);