diff --git a/salt/soc/config.sls b/salt/soc/config.sls
index 18b292b27..545118dd9 100644
--- a/salt/soc/config.sls
+++ b/salt/soc/config.sls
@@ -84,7 +84,7 @@ crondetectionsruntime:
   cron.present:
     - name: /usr/local/bin/so-detections-runtime-status cron > /opt/so/log/soc/detection-sync.log 2>&1
     - identifier: detections-runtime-status
-    - user: socore
+    - user: root
     - minute: '*/10'
     - hour: '*'
     - daymonth: '*'