diff --git a/puppet/services/horizon.yaml b/puppet/services/horizon.yaml
index cd885b2ed2..c93ec2b4ab 100644
--- a/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@ -166,3 +166,5 @@ outputs:
               dport:
                 - 80
                 - 443
+        keystone:
+          keystone_enable_member: true
diff --git a/releasenotes/notes/horizon_keystone_member-838d4b65cc0b0d11.yaml b/releasenotes/notes/horizon_keystone_member-838d4b65cc0b0d11.yaml
new file mode 100644
index 0000000000..35e2b759e1
--- /dev/null
+++ b/releasenotes/notes/horizon_keystone_member-838d4b65cc0b0d11.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    When Horizon is enabled, the _member_ Keystone role will now be created.
+    (`bug 1741066 <https://bugs.launchpad.net/tripleo/+bug/1741066>`__).