diff --git a/samples/deployments/README.rst b/samples/deployments/README.rst
index c049a397..b08948b1 100644
--- a/samples/deployments/README.rst
+++ b/samples/deployments/README.rst
@@ -23,14 +23,19 @@ existing-keystone-v3.json
 Register existing OpenStack cluster that uses Keystone v3.
 
 existing-with-predefined-users.json
---------------------------------------
+------------------------------------
 
 If you are using read-only backend in Keystone like LDAP, AD then
 you need this sample. If you don't specify "users" rally will use already
 existing users that you provide.
 
+existing-keystone-v3-user.json
+------------------------------
+
+Register an exisitng OpenStack cluster that uses Keystone v3 and a non-privileged user. The use of an admin account is optional because most tests can use a normal account.
+
 existing-api.json
---------------------------------
+-----------------
 
 If you expect to specify version of some clients, you could register existing
 Openstack cluster like this sample.
diff --git a/samples/deployments/existing-keystone-v3-user.json b/samples/deployments/existing-keystone-v3-user.json
new file mode 100644
index 00000000..84357c6e
--- /dev/null
+++ b/samples/deployments/existing-keystone-v3-user.json
@@ -0,0 +1,18 @@
+{
+    "openstack": {
+        "auth_url": "http://example.net:5000/v3/",
+        "region_name": "RegionOne",
+        "endpoint_type": "public",
+        "users": [
+            {
+                "username": "normal_user",
+                "password": "password",
+                "user_domain_name": "Default",
+                "project_name": "normal_project",
+                "project_domain_name": "Default"
+            }
+        ],
+        "https_insecure": false,
+        "https_cacert": ""
+    }
+}