Create heat role for dynamically added users.

I have no idea how heat has been working at all.

Change-Id: Ie073022849b92323187e858dc72fd8397899abbe