diff --git a/scripts/gre-packstack.sh b/scripts/gre-packstack.sh
index 92c57fe..06468f5 100644
--- a/scripts/gre-packstack.sh
+++ b/scripts/gre-packstack.sh
@@ -43,6 +43,8 @@ demo_tenant_id=$(keystone tenant-get demo | grep id | awk '{print $4}')
 neutron net-create stack_net_priv --provider:network_type=gre --tenant-id ${demo_tenant_id} --provider:segmentation_id=11
 keystone user-create --name demo --pass demo
 keystone user-role-add --user demo --role _member_ --tenant demo
+keystone user-role-add --user demo --role heat_stack_owner --tenant demo
+keystone user-role-add --user demo --role heat_stack_user --tenant demo
 
 cat > /root/keystonerc_demo << EOF
 export OS_USERNAME=demo
diff --git a/scripts/vxlan-packstack.sh b/scripts/vxlan-packstack.sh
index 4e73f36..49cbb3e 100644
--- a/scripts/vxlan-packstack.sh
+++ b/scripts/vxlan-packstack.sh
@@ -33,6 +33,8 @@ glance image-create --name cirros --is-public=True --disk-format=qcow2 \
 keystone tenant-create --name demo
 keystone user-create --name demo --pass demo
 keystone user-role-add --user demo --role _member_ --tenant demo
+keystone user-role-add --user demo --role heat_stack_owner --tenant demo
+keystone user-role-add --user demo --role heat_stack_user --tenant demo
 
 cat > /root/keystonerc_demo << EOF
 export OS_USERNAME=demo