diff --git a/defaults/main.yml b/defaults/main.yml
index a97e393..41c6499 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -53,3 +53,8 @@ deploydrupal_npm_theme_run_commands: []
 
 # Rebuild Drupal cache.
 deploydrupal_drush_cache_rebuild: true
+
+# Site file directory folders that need permission fixes after site install.
+deploydrupal_file_permission_fix_directories:
+  - 'styles'
+  - 'media-icons'
diff --git a/tasks/main.yml b/tasks/main.yml
index e38019f..0907a05 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -8,7 +8,7 @@
     mode: 0770
   become: "{{ deploydrupal_files_become }}"
 
-- name: open permissions on default directory.
+- name: open permissions on site directory.
   file:
     path: "{{ deploydrupal_core_path }}/sites/{{ deploydrupal_site_name }}"
     state: directory
@@ -98,6 +98,18 @@
   when:
     - deploydrupal_site_install
 
+- name: adjust files directory sub-folder permissions after site install.
+  file:
+    path: "{{ deploydrupal_core_path }}/sites/{{ deploydrupal_site_name }}/files/{{ item }}"
+    state: directory
+    owner: "{{ deploydrupal_apache_user }}"
+    group: "{{ deploydrupal_checkout_user }}"
+    mode: 0770
+  become: "{{ deploydrupal_files_become }}"
+  with_items: "{{ deploydrupal_file_permission_fix_directories }}"
+  when:
+    - deploydrupal_site_install
+
 # Import the latest configuration. This includes the latest
 # configuration_split configuration. Importing this twice ensures that the
 # latter command enables and disables modules based upon the most up to date