diff --git a/ansible/roles/pip/tasks/pip_conf.yml b/ansible/roles/pip/tasks/pip_conf.yml
index 6d473da0e5af59b600715396c208102fa872d5a7..3fa3493d62ba6aebe9e277d2caaea8833c89eeb3 100644
--- a/ansible/roles/pip/tasks/pip_conf.yml
+++ b/ansible/roles/pip/tasks/pip_conf.yml
@@ -1,4 +1,11 @@
 ---
+# NOTE(mgoddard): The acl package is required for the setfacl command, used by
+# become_user.
+- name: Ensure acl package is installed
+  package:
+    name: acl
+  become: true
+
 - name: Create local .pip directory
   file:
     path: "~{{ item }}/.pip"