diff --git a/docker/services/ceph-ansible/ceph-base.yaml b/docker/services/ceph-ansible/ceph-base.yaml
index ca7d4cbd5c..51783141e6 100644
--- a/docker/services/ceph-ansible/ceph-base.yaml
+++ b/docker/services/ceph-ansible/ceph-base.yaml
@@ -258,7 +258,7 @@ resources:
           rgw_keystone_api_version: 3
           rgw_keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
           rgw_keystone_accepted_roles: 'Member, admin'
-          rgw_keystone_accepted_admin_roles: ResellerAdmin
+          rgw_keystone_accepted_admin_roles: ResellerAdmin, swiftoperator
           rgw_keystone_admin_domain: default
           rgw_keystone_admin_project: service
           rgw_keystone_admin_user: swift
diff --git a/docker/services/ceph-ansible/ceph-rgw.yaml b/docker/services/ceph-ansible/ceph-rgw.yaml
index 4185b99d24..1d208445a7 100644
--- a/docker/services/ceph-ansible/ceph-rgw.yaml
+++ b/docker/services/ceph-ansible/ceph-rgw.yaml
@@ -100,7 +100,7 @@ outputs:
           ceph::rgw::keystone::auth::internal_url: {get_param: [EndpointMap, CephRgwInternal, uri]}
           ceph::rgw::keystone::auth::admin_url: {get_param: [EndpointMap, CephRgwAdmin, uri]}
           ceph::rgw::keystone::auth::region: {get_param: KeystoneRegion}
-          ceph::rgw::keystone::auth::roles: [ 'admin', 'member' ]
+          ceph::rgw::keystone::auth::roles: [ 'admin', 'member', 'ResellerAdmin', 'swiftoperator' ]
           ceph::rgw::keystone::auth::tenant: service
           ceph::rgw::keystone::auth::user: swift
           ceph::rgw::keystone::auth::password: {get_param: SwiftPassword}