Ensure heat_stack_user role exists