diff --git a/.github/workflows/create-deployment-spack.yml b/.github/workflows/create-deployment-spack.yml
index 66baae4..d3fb592 100644
--- a/.github/workflows/create-deployment-spack.yml
+++ b/.github/workflows/create-deployment-spack.yml
@@ -67,4 +67,13 @@ jobs:
           git -C ${{ env.ROOT_VERSION_LOCATION }} clone https://github.com/ACCESS-NRI/spack-config.git --branch ${{ inputs.spack-config-version }}
           ln -s -r -v ${{ env.ROOT_VERSION_LOCATION }}/spack-config/v${{ steps.strip.outputs.version-dir }}/${{ vars.DEPLOYMENT_TARGET }}/* ${{ env.ROOT_VERSION_LOCATION }}/spack/etc/spack/
           mkdir ${{ env.ROOT_VERSION_LOCATION }}/release
+
+          # Create restricted folders
+          mkdir -p ${{ env.ROOT_VERSION_LOCATION }}/restricted/ukmo/release
+          mkdir -p ${{ env.ROOT_VERSION_LOCATION }}/restricted/ukmo/source_cache
+          mkdir -p $tempdir/$user/restricted/spack-stage
+
+          setfacl --recursive -m \
+            "g:vk83_w:r-X,g:ki32_mosrs:r-X,g:vk83:---,other::---,d:g:vk83_w:r-X,d:g:ki32_mosrs:r-X,d:g:vk83:---,d:other::---" \
+            ${{ env.ROOT_VERSION_LOCATION }}/restricted $tempdir/$user/restricted
           EOT