diff --git a/docker/kolla-toolbox/kolla_keystone_user.py b/docker/kolla-toolbox/kolla_keystone_user.py
index e6a56f3c2c..319cf67c82 100644
--- a/docker/kolla-toolbox/kolla_keystone_user.py
+++ b/docker/kolla-toolbox/kolla_keystone_user.py
@@ -68,6 +68,12 @@ def main():
                                      password=password,
                                      default_project=project,
                                      domain_id='default')
+        role_assignments = cloud.keystone_client.role_assignments
+        assignment = role_assignments.list(user=user,
+                                           project=project,
+                                           role=role)
+        if not assignment:
+            changed = True
             cloud.grant_role(role,
                              user=user,
                              project=project)