diff --git a/manifests/resource/service_identity.pp b/manifests/resource/service_identity.pp
index 704e9cf73..08eaa7f5e 100644
--- a/manifests/resource/service_identity.pp
+++ b/manifests/resource/service_identity.pp
@@ -140,6 +140,9 @@
       'ensure' => 'present',
       'roles'  => $roles,
     })
+    if $configure_user {
+      Keystone_user[$auth_name] -> Keystone_user_role["${auth_name}@${tenant}"]
+    }
   }
 
   if $configure_service {