diff --git a/nomad/consul.go b/nomad/consul.go
index 14511ad4bad7..ce92199e5f5e 100644
--- a/nomad/consul.go
+++ b/nomad/consul.go
@@ -220,6 +220,7 @@ func (c *consulACLsAPI) CreateToken(ctx context.Context, sir ServiceIdentityRequ
 	partial := &api.ACLToken{
 		Description:       sir.Description(),
 		ServiceIdentities: []*api.ACLServiceIdentity{{ServiceName: service}},
+		Local:             true,
 	}
 
 	// Ensure we are under our rate limit.