diff --git a/aodh/server/cluster.yml b/aodh/server/cluster.yml
index c458c2c..53ec417 100644
--- a/aodh/server/cluster.yml
+++ b/aodh/server/cluster.yml
@@ -33,7 +33,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: aodh
-        user: aodh
+        user: ${_param:mysql_aodh_username}
         password: ${_param:mysql_aodh_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -50,7 +50,7 @@
         host: ${_param:keystone_service_host}
         port: 35357
         tenant: service
-        user: aodh
+        user: ${_param:keystone_aodh_username}
         password: ${_param:keystone_aodh_password}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/barbican/server/cluster.yml b/barbican/server/cluster.yml
index 7b98c83..110ff29 100644
--- a/barbican/server/cluster.yml
+++ b/barbican/server/cluster.yml
@@ -8,8 +8,12 @@
     server:
       role: ${_param:openstack_node_role}
       identity:
+        user: ${_param:keystone_barbican_username}
+        password: ${_param:keystone_barbican_password}
         protocol: ${_param:cluster_internal_protocol}
       database:
+        user: ${_param:mysql_barbican_username}
+        password: ${_param:mysql_barbican_password}
         host: ${_param:openstack_database_address}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
diff --git a/barbican/server/single.yml b/barbican/server/single.yml
index c1ef15e..1ee95f7 100644
--- a/barbican/server/single.yml
+++ b/barbican/server/single.yml
@@ -9,6 +9,8 @@
   barbican:
     server:
       database:
+        user: ${_param:mysql_barbican_username}
+        password: ${_param:mysql_barbican_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_barbican_ssl_ca_file}
@@ -18,6 +20,8 @@
           enabled: ${_param:galera_ssl_enabled}
       role: ${_param:openstack_node_role}
       identity:
+        user: ${_param:keystone_barbican_username}
+        password: ${_param:keystone_barbican_password}
         protocol: ${_param:internal_protocol}
       message_queue:
         port: ${_param:openstack_rabbitmq_port}
diff --git a/ceilometer/agent/cluster.yml b/ceilometer/agent/cluster.yml
index 6bb4e71..c24adf7 100644
--- a/ceilometer/agent/cluster.yml
+++ b/ceilometer/agent/cluster.yml
@@ -17,7 +17,7 @@
         host: ${_param:keystone_service_host}
         port: 35357
         tenant: service
-        user: ceilometer
+        user: ${_param:keystone_ceilometer_username}
         password: ${_param:keystone_ceilometer_password}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/ceilometer/agent/single.yml b/ceilometer/agent/single.yml
index 037bb4e..0bf079f 100644
--- a/ceilometer/agent/single.yml
+++ b/ceilometer/agent/single.yml
@@ -9,6 +9,8 @@
         ssl:
           enabled: ${_param:ceilometer_agent_ssl_enabled}
       identity:
+        user: ${_param:keystone_ceilometer_username}
+        password: ${_param:keystone_ceilometer_password}
         protocol: ${_param:internal_protocol}
       message_queue:
         port: ${_param:openstack_rabbitmq_port}
diff --git a/ceilometer/agent/telemetry/cluster.yml b/ceilometer/agent/telemetry/cluster.yml
index 26f9a68..8f9c996 100644
--- a/ceilometer/agent/telemetry/cluster.yml
+++ b/ceilometer/agent/telemetry/cluster.yml
@@ -17,7 +17,7 @@
         host: ${_param:keystone_service_host}
         port: 35357
         tenant: service
-        user: ceilometer
+        user: ${_param:keystone_ceilometer_username}
         password: ${_param:keystone_ceilometer_password}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/ceilometer/server/cluster.yml b/ceilometer/server/cluster.yml
index 0704a2b..485eda2 100644
--- a/ceilometer/server/cluster.yml
+++ b/ceilometer/server/cluster.yml
@@ -29,7 +29,7 @@
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: ceilometer
+        user: ${_param:keystone_ceilometer_username}
         password: ${_param:keystone_ceilometer_password}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/ceilometer/server/telemetry/cluster.yml b/ceilometer/server/telemetry/cluster.yml
index c7d2686..9ee78ef 100644
--- a/ceilometer/server/telemetry/cluster.yml
+++ b/ceilometer/server/telemetry/cluster.yml
@@ -25,7 +25,7 @@
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: ceilometer
+        user: ${_param:keystone_ceilometer_username}
         password: ${_param:keystone_ceilometer_password}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/cinder/control/cluster.yml b/cinder/control/cluster.yml
index 8aa97c4..cf5b84b 100644
--- a/cinder/control/cluster.yml
+++ b/cinder/control/cluster.yml
@@ -36,7 +36,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: cinder
-        user: cinder
+        user: ${_param:mysql_cinder_username}
         password: ${_param:mysql_cinder_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -51,7 +51,7 @@
         host: ${_param:cluster_vip_address}
         port: 35357
         tenant: service
-        user: cinder
+        user: ${_param:keystone_cinder_username}
         password: ${_param:keystone_cinder_password}
         protocol: ${_param:cluster_internal_protocol}
       glance:
diff --git a/cinder/control/single.yml b/cinder/control/single.yml
index bae7bfc..3ab34e2 100644
--- a/cinder/control/single.yml
+++ b/cinder/control/single.yml
@@ -22,6 +22,8 @@
       # set 'image_conversion_dir' option in case of ceph deployment volume and controller running on the same node
       image_conversion_dir: ${_param:cinder_image_conversion_dir_path}
       database:
+        user: ${_param:mysql_cinder_username}
+        password: ${_param:mysql_cinder_password}
         host: ${_param:single_address}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -31,6 +33,8 @@
         ssl:
           enabled: ${_param:galera_ssl_enabled}
       identity:
+        user: ${_param:keystone_cinder_username}
+        password: ${_param:keystone_cinder_password}
         protocol: ${_param:internal_protocol}
         region: ${_param:openstack_region}
       barbican:
diff --git a/cinder/volume/local.yml b/cinder/volume/local.yml
index cd07d4d..000de98 100644
--- a/cinder/volume/local.yml
+++ b/cinder/volume/local.yml
@@ -9,6 +9,8 @@
       enabled: True
       image_conversion_dir: ${_param:cinder_image_conversion_dir_path}
       database:
+        user: ${_param:mysql_cinder_username}
+        password: ${_param:mysql_cinder_password}
         host: ${_param:single_address}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -32,6 +34,8 @@
         ssl:
           enabled: ${_param:rabbitmq_ssl_enabled}
       identity:
+        user: ${_param:keystone_cinder_username}
+        password: ${_param:keystone_cinder_password}
         host: ${_param:single_address}
         region: ${_param:openstack_region}
       cache:
diff --git a/cinder/volume/single.yml b/cinder/volume/single.yml
index 34f5744..8c62889 100644
--- a/cinder/volume/single.yml
+++ b/cinder/volume/single.yml
@@ -15,6 +15,8 @@
       enabled: True
       image_conversion_dir: ${_param:cinder_image_conversion_dir_path}
       database:
+        user: ${_param:mysql_cinder_username}
+        password: ${_param:mysql_cinder_password}
         host: ${_param:openstack_database_address}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -42,6 +44,8 @@
         ssl:
           enabled: ${_param:rabbitmq_ssl_enabled}
       identity:
+        user: ${_param:keystone_cinder_username}
+        password: ${_param:keystone_cinder_password}
         host: ${_param:openstack_control_address}
         protocol: ${_param:cluster_internal_protocol}
         region: ${_param:openstack_region}
diff --git a/defaults/openstack/init.yml b/defaults/openstack/init.yml
index cc62919..61af318 100644
--- a/defaults/openstack/init.yml
+++ b/defaults/openstack/init.yml
@@ -41,6 +41,8 @@
       ignore_lockout_failure_attempts: True
       lock_password: False
     # Cinder
+    mysql_cinder_username: cinder
+    keystone_cinder_username: cinder
     cinder_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     cinder_memcache_secret_key: ''
     cinder_old_version: ${_param:openstack_old_version}
@@ -49,6 +51,8 @@
     cinder_service_user_enabled: ${_param:openstack_service_user_enabled}
     cinder_image_conversion_dir_path: /var/tmp/cinder/conversion
     # Nova
+    mysql_nova_username: nova
+    keystone_nova_username: nova
     nova_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     nova_memcache_secret_key: ''
     nova_old_version: ${_param:openstack_old_version}
@@ -56,6 +60,8 @@
     nova_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     nova_service_user_enabled: ${_param:openstack_service_user_enabled}
     # Glance
+    mysql_glance_username: glance
+    keystone_glance_username: glance
     glance_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     glance_memcache_secret_key: ''
     glance_old_version: ${_param:openstack_old_version}
@@ -64,12 +70,16 @@
     # Allow CORS from horizon, needed for direct upload
     glance_cors_allowed_origin: '${_param:horizon_public_protocol}://${_param:horizon_public_host}'
     # Heat
+    mysql_heat_username: heat
+    keystone_heat_username: heat
     heat_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     heat_memcache_secret_key: ''
     heat_old_version: ${_param:openstack_old_version}
     heat_version: ${_param:openstack_version}
     heat_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     # Aodh
+    mysql_aodh_username: aodh
+    keystone_aodh_username: aodh
     aodh_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     aodh_memcache_secret_key: ''
     aodh_old_version: ${_param:openstack_old_version}
@@ -78,12 +88,22 @@
     aodh_redis_db: ${_param:openstack_telemetry_redis_db}
     aodh_redis_sentinel_mastername: ${_param:openstack_telemetry_redis_sentinel_mastername}
     # Ceilometer
+    mysql_ceilometer_username: ceilometer
+    keystone_ceilometer_username: ceilometer
     ceilometer_old_version: ${_param:openstack_old_version}
     ceilometer_version: ${_param:openstack_version}
     ceilometer_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     ceilometer_redis_db: ${_param:openstack_telemetry_redis_db}
     ceilometer_redis_sentinel_mastername: ${_param:openstack_telemetry_redis_sentinel_mastername}
+    # Congress
+    keystone_congress_username: congress
+    # Grafana
+    mysql_grafana_username: grafana
+    # Graphite
+    mysql_graphite_username: graphite
     # Gnocchi
+    mysql_gnocchi_username: gnocchi
+    keystone_gnocchi_username: gnocchi
     gnocchi_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     gnocchi_memcache_secret_key: ''
     gnocchi_version: 4.0
@@ -92,25 +112,36 @@
     gnocchi_redis_db: ${_param:openstack_telemetry_redis_db}
     gnocchi_redis_sentinel_mastername: ${_param:openstack_telemetry_redis_sentinel_mastername}
     # Panko
+    mysql_panko_username: panko
+    keystone_panko_username: panko
     panko_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     panko_memcache_secret_key: ''
     panko_old_version: ${_param:openstack_old_version}
     panko_version: ${_param:openstack_version}
     panko_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     # Barbican
+    mysql_barbican_username: barbican
+    keystone_barbican_username: barbican
     barbican_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     barbican_memcache_secret_key: ''
     barbican_old_version: ${_param:openstack_old_version}
     barbican_version: ${_param:openstack_version}
     barbican_upgrade_enabled: ${_param:openstack_upgrade_enabled}
+    # Billometer
+    keystone_billometer_username: billometer
     # Designate
+    mysql_designate_username: designate
+    keystone_designate_username: designate
     designate_old_version: ${_param:openstack_old_version}
     designate_version: ${_param:openstack_version}
     designate_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     # Ironic
+    mysql_ironic_username: ironic
+    keystone_ironic_username: ironic
     ironic_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
     ironic_memcache_secret_key: ''
     # Keystone
+    mysql_keystone_username: keystone
     keystone_old_version: ${_param:openstack_old_version}
     keystone_version: ${_param:openstack_version}
     keystone_upgrade_enabled: ${_param:openstack_upgrade_enabled}
@@ -133,10 +164,17 @@
     keystone_fernet_rotate_rsync_minute: 0
     keystone_fernet_rotate_rsync_hour: '*'
     # Manila
+    mysql_manila_username: manila
+    keystone_manila_username: manila
     manila_old_version: ${_param:openstack_old_version}
     manila_version: ${_param:openstack_version}
     manila_upgrade_enabled: ${_param:openstack_upgrade_enabled}
+    # Murano
+    mysql_murano_username: murano
+    keystone_murano_username: murano
     # Neutron
+    mysql_neutron_username: neutron
+    keystone_neutron_username: neutron
     neutron_old_version: ${_param:openstack_old_version}
     neutron_version: ${_param:openstack_version}
     neutron_upgrade_enabled: ${_param:openstack_upgrade_enabled}
@@ -187,12 +225,22 @@
     horizon_version: ${_param:openstack_version}
     horizon_upgrade_enabled: ${_param:openstack_upgrade_enabled}
     # Octavia
+    mysql_octavia_username: octavia
+    keystone_octavia_username: octavia
     octavia_health_manager_node01_address: 192.168.10.10
     octavia_health_manager_node02_address: 192.168.10.11
     octavia_health_manager_node03_address: 192.168.10.12
     #
     amphora_image_name: amphora-x64-haproxy
     amphora_image_url: "${_param:mcp_binary_registry}/mirantis/openstack/octavia/images/${_param:mcp_version}/${_param:openstack_version}/amphora-x64-haproxy.qcow2"
+    # Sahara
+    mysql_sahara_username: sahara
+    keystone_sahara_username: sahara
+    # Swift
+    keystone_swift_username: swift
+    # Tacker
+    mysql_tacker_username: tacker
+    keystone_tacker_username: tacker
     # HAproxy
     haproxy_openstack_web_bind_port: ${_param:horizon_public_port}
     #
diff --git a/designate/server/cluster/default.yml b/designate/server/cluster/default.yml
index a7d6bb2..cd0bc1d 100644
--- a/designate/server/cluster/default.yml
+++ b/designate/server/cluster/default.yml
@@ -36,7 +36,7 @@
         name:
           main_database: designate
           pool_manager: designate_pool_manager
-        user: designate
+        user: ${_param:mysql_designate_username}
         password: ${_param:mysql_designate_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -50,7 +50,7 @@
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: designate
+        user: ${_param:keystone_designate_username}
         password: ${_param:keystone_designate_password}
         protocol: ${_param:cluster_internal_protocol}
       bind:
diff --git a/designate/server/cluster/simple.yml b/designate/server/cluster/simple.yml
index ecf34c1..55998d5 100644
--- a/designate/server/cluster/simple.yml
+++ b/designate/server/cluster/simple.yml
@@ -33,7 +33,7 @@
         name:
           main_database: designate
           pool_manager: designate_pool_manager
-        user: designate
+        user: ${_param:mysql_designate_username}
         password: ${_param:mysql_designate_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -47,7 +47,7 @@
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: designate
+        user: ${_param:keystone_designate_username}
         password: ${_param:keystone_designate_password}
         protocol: ${_param:cluster_internal_protocol}
       bind:
diff --git a/designate/server/single.yml b/designate/server/single.yml
index f054b0c..8f07ffb 100644
--- a/designate/server/single.yml
+++ b/designate/server/single.yml
@@ -34,7 +34,7 @@
         name:
           main_database: designate
           pool_manager: designate_pool_manager
-        user: designate
+        user: ${_param:mysql_designate_username}
         password: ${_param:mysql_designate_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -48,7 +48,7 @@
         host: ${_param:single_address}
         port: 35357
         tenant: service
-        user: designate
+        user: ${_param:keystone_designate_username}
         password: ${_param:keystone_designate_password}
         protocol: ${_param:internal_protocol}
       message_queue:
diff --git a/galera/server/database/aodh.yml b/galera/server/database/aodh.yml
index c7cdfdc..d71a0ef 100644
--- a/galera/server/database/aodh.yml
+++ b/galera/server/database/aodh.yml
@@ -7,12 +7,12 @@
         aodh:
           encoding: utf8
           users:
-          - name: aodh
+          - name: ${_param:mysql_aodh_username}
             password: ${_param:mysql_aodh_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_aodh_ssl_option}
-          - name: aodh
+          - name: ${_param:mysql_aodh_username}
             password: ${_param:mysql_aodh_password}
             host: ${_param:cluster_vip_address}
             rights: all
diff --git a/galera/server/database/barbican.yml b/galera/server/database/barbican.yml
index a292660..21bd732 100644
--- a/galera/server/database/barbican.yml
+++ b/galera/server/database/barbican.yml
@@ -7,12 +7,12 @@
         barbican:
           encoding: utf8
           users:
-          - name: barbican
+          - name: ${_param:mysql_barbican_username}
             password: ${_param:mysql_barbican_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_barbican_ssl_option}
-          - name: barbican
+          - name: ${_param:mysql_barbican_username}
             password: ${_param:mysql_barbican_password}
             host: ${_param:cluster_vip_address}
             rights: all
diff --git a/galera/server/database/ceilometer.yml b/galera/server/database/ceilometer.yml
index 08a7f8b..586aae3 100644
--- a/galera/server/database/ceilometer.yml
+++ b/galera/server/database/ceilometer.yml
@@ -7,12 +7,12 @@
         ceilometer:
           encoding: utf8
           users:
-          - name: ceilometer
+          - name: ${_param:mysql_ceilometer_username}
             password: ${_param:mysql_ceilometer_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_ceilometer_ssl_option}
-          - name: ceilometer
+          - name: ${_param:mysql_ceilometer_username}
             password: ${_param:mysql_ceilometer_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/cinder.yml b/galera/server/database/cinder.yml
index 6478cb8..f1ae9a3 100644
--- a/galera/server/database/cinder.yml
+++ b/galera/server/database/cinder.yml
@@ -7,12 +7,12 @@
         cinder:
           encoding: utf8
           users:
-          - name: cinder
+          - name: ${_param:mysql_cinder_username}
             password: ${_param:mysql_cinder_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_cinder_ssl_option}
-          - name: cinder
+          - name: ${_param:mysql_cinder_username}
             password: ${_param:mysql_cinder_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/designate.yml b/galera/server/database/designate.yml
index 43a76f9..fef27ab 100644
--- a/galera/server/database/designate.yml
+++ b/galera/server/database/designate.yml
@@ -7,12 +7,12 @@
         designate:
           encoding: utf8
           users:
-          - name: designate
+          - name: ${_param:mysql_designate_username}
             password: ${_param:mysql_designate_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_designate_ssl_option}
-          - name: designate
+          - name: ${_param:mysql_designate_username}
             password: ${_param:mysql_designate_password}
             host: ${_param:cluster_vip_address}
             rights: all
@@ -20,12 +20,12 @@
         designate_pool_manager:
           encoding: utf8
           users:
-          - name: designate
+          - name: ${_param:mysql_designate_username}
             password: ${_param:mysql_designate_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_designate_ssl_option}
-          - name: designate
+          - name: ${_param:mysql_designate_username}
             password: ${_param:mysql_designate_password}
             host: ${_param:cluster_vip_address}
             rights: all
diff --git a/galera/server/database/glance.yml b/galera/server/database/glance.yml
index 7af81d8..0ca9f6b 100644
--- a/galera/server/database/glance.yml
+++ b/galera/server/database/glance.yml
@@ -7,12 +7,12 @@
         glance:
           encoding: utf8
           users:
-          - name: glance
+          - name: ${_param:mysql_glance_username}
             password: ${_param:mysql_glance_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_glance_ssl_option}
-          - name: glance
+          - name: ${_param:mysql_glance_username}
             password: ${_param:mysql_glance_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/gnocchi.yml b/galera/server/database/gnocchi.yml
index 1ee36da..71c468e 100644
--- a/galera/server/database/gnocchi.yml
+++ b/galera/server/database/gnocchi.yml
@@ -7,12 +7,12 @@
         gnocchi:
           encoding: utf8
           users:
-          - name: gnocchi
+          - name: ${_param:mysql_gnocchi_username}
             password: ${_param:mysql_gnocchi_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_gnocchi_ssl_option}
-          - name: gnocchi
+          - name: ${_param:mysql_gnocchi_username}
             password: ${_param:mysql_gnocchi_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/grafana.yml b/galera/server/database/grafana.yml
index 3bfee87..3afb436 100644
--- a/galera/server/database/grafana.yml
+++ b/galera/server/database/grafana.yml
@@ -7,12 +7,12 @@
         grafana:
           encoding: utf8
           users:
-          - name: grafana
+          - name: ${_param:mysql_grafana_username}
             password: ${_param:mysql_grafana_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_grafana_ssl_option}
-          - name: grafana
+          - name: ${_param:mysql_grafana_username}
             password: ${_param:mysql_grafana_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/graphite.yml b/galera/server/database/graphite.yml
index 595c16b..fb0582c 100644
--- a/galera/server/database/graphite.yml
+++ b/galera/server/database/graphite.yml
@@ -7,7 +7,7 @@
         graphite:
           encoding: 'utf8'
           users:
-          - name: 'graphite'
+          - name: '${_param:mysql_graphite_username}'
             password: '${_param:mysql_graphite_password}'
             host: '%'
             rights: 'all'
diff --git a/galera/server/database/heat.yml b/galera/server/database/heat.yml
index 31b3968..a17db4b 100644
--- a/galera/server/database/heat.yml
+++ b/galera/server/database/heat.yml
@@ -7,12 +7,12 @@
         heat:
           encoding: utf8
           users:
-          - name: heat
+          - name: ${_param:mysql_heat_username}
             password: ${_param:mysql_heat_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_heat_ssl_option}
-          - name: heat
+          - name: ${_param:mysql_heat_username}
             password: ${_param:mysql_heat_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/ironic.yml b/galera/server/database/ironic.yml
index a478aeb..10ea447 100644
--- a/galera/server/database/ironic.yml
+++ b/galera/server/database/ironic.yml
@@ -7,12 +7,12 @@
         ironic:
           encoding: utf8
           users:
-          - name: ironic
+          - name: ${_param:mysql_ironic_username}
             password: ${_param:mysql_ironic_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_ironic_ssl_option}
-          - name: ironic
+          - name: ${_param:mysql_ironic_username}
             password: ${_param:mysql_ironic_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/keystone.yml b/galera/server/database/keystone.yml
index d6483cd..2dc90ff 100644
--- a/galera/server/database/keystone.yml
+++ b/galera/server/database/keystone.yml
@@ -7,12 +7,12 @@
         keystone:
           encoding: utf8
           users:
-          - name: keystone
+          - name: ${_param:mysql_keystone_username}
             password: ${_param:mysql_keystone_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_keystone_ssl_option}
-          - name: keystone
+          - name: ${_param:mysql_keystone_username}
             password: ${_param:mysql_keystone_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/manila.yml b/galera/server/database/manila.yml
index d233ce9..dc6c415 100644
--- a/galera/server/database/manila.yml
+++ b/galera/server/database/manila.yml
@@ -7,12 +7,12 @@
         manila:
           encoding: utf8
           users:
-          - name: manila
+          - name: ${_param:mysql_manila_username}
             password: ${_param:mysql_manila_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_manila_ssl_option}
-          - name: manila
+          - name: ${_param:mysql_manila_username}
             password: ${_param:mysql_manila_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/neutron.yml b/galera/server/database/neutron.yml
index b5ee606..772a57d 100644
--- a/galera/server/database/neutron.yml
+++ b/galera/server/database/neutron.yml
@@ -7,12 +7,12 @@
         neutron:
           encoding: 'utf8'
           users:
-          - name: 'neutron'
+          - name: '${_param:mysql_neutron_username}'
             password: '${_param:mysql_neutron_password}'
             host: '%'
             rights: 'all'
             ssl_option: ${_param:mysql_neutron_ssl_option}
-          - name: 'neutron'
+          - name: '${_param:mysql_neutron_username}'
             password: '${_param:mysql_neutron_password}'
             host: '${_param:cluster_local_address}'
             rights: 'all'
diff --git a/galera/server/database/nova.yml b/galera/server/database/nova.yml
index d2ffc4a..44bfc95 100644
--- a/galera/server/database/nova.yml
+++ b/galera/server/database/nova.yml
@@ -7,12 +7,12 @@
         nova:
           encoding: utf8
           users:
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_nova_ssl_option}
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: ${_param:cluster_local_address}
             rights: all
@@ -20,12 +20,12 @@
         nova_api:
           encoding: utf8
           users:
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_nova_ssl_option}
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: ${_param:cluster_local_address}
             rights: all
@@ -33,12 +33,12 @@
         nova_cell0:
           encoding: utf8
           users:
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_nova_ssl_option}
-          - name: nova
+          - name: ${_param:mysql_nova_username}
             password: ${_param:mysql_nova_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/octavia.yml b/galera/server/database/octavia.yml
index 7b4eaaf..893a738 100644
--- a/galera/server/database/octavia.yml
+++ b/galera/server/database/octavia.yml
@@ -7,12 +7,12 @@
         octavia:
           encoding: 'utf8'
           users:
-          - name: 'octavia'
+          - name: '${_param:mysql_octavia_username}'
             password: '${_param:mysql_octavia_password}'
             host: '%'
             rights: 'all'
             ssl_option: ${_param:mysql_octavia_ssl_option}
-          - name: 'octavia'
+          - name: '${_param:mysql_octavia_username}'
             password: '${_param:mysql_octavia_password}'
             host: '${_param:cluster_local_address}'
             rights: 'all'
diff --git a/galera/server/database/panko.yml b/galera/server/database/panko.yml
index c4c455a..3e00e5a 100644
--- a/galera/server/database/panko.yml
+++ b/galera/server/database/panko.yml
@@ -7,12 +7,12 @@
         panko:
           encoding: utf8
           users:
-          - name: panko
+          - name: ${_param:mysql_panko_username}
             password: ${_param:mysql_panko_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_panko_ssl_option}
-          - name: panko
+          - name: ${_param:mysql_panko_username}
             password: ${_param:mysql_panko_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/galera/server/database/tacker.yml b/galera/server/database/tacker.yml
index 9cd76b5..d181450 100644
--- a/galera/server/database/tacker.yml
+++ b/galera/server/database/tacker.yml
@@ -7,12 +7,12 @@
         tacker:
           encoding: utf8
           users:
-          - name: tacker
+          - name: ${_param:mysql_tacker_username}
             password: ${_param:mysql_tacker_password}
             host: '%'
             rights: all
             ssl_option: ${_param:mysql_tacker_ssl_option}
-          - name: tacker
+          - name: ${_param:mysql_tacker_username}
             password: ${_param:mysql_tacker_password}
             host: ${_param:cluster_local_address}
             rights: all
diff --git a/glance/control/cluster.yml b/glance/control/cluster.yml
index 3eb7866..763ad09 100644
--- a/glance/control/cluster.yml
+++ b/glance/control/cluster.yml
@@ -28,7 +28,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: glance
-        user: glance
+        user: ${_param:mysql_glance_username}
         password: ${_param:mysql_glance_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -50,7 +50,7 @@
         engine: keystone
         host: ${_param:cluster_vip_address}
         port: 35357
-        user: glance
+        user: ${_param:keystone_glance_username}
         password: ${_param:keystone_glance_password}
         region: ${_param:openstack_region}
         tenant: service
diff --git a/gnocchi/common/cluster.yml b/gnocchi/common/cluster.yml
index b00ffa5..e1c58da 100644
--- a/gnocchi/common/cluster.yml
+++ b/gnocchi/common/cluster.yml
@@ -6,6 +6,8 @@
   gnocchi:
     common:
       database:
+        user: ${_param:mysql_gnocchi_username}
+        password: ${_param:mysql_gnocchi_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_gnocchi_ssl_ca_file}
diff --git a/gnocchi/common/single.yml b/gnocchi/common/single.yml
index 834db2f..614e85e 100644
--- a/gnocchi/common/single.yml
+++ b/gnocchi/common/single.yml
@@ -6,6 +6,8 @@
   gnocchi:
     common:
       database:
+        user: ${_param:mysql_gnocchi_username}
+        password: ${_param:mysql_gnocchi_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_gnocchi_ssl_ca_file}
diff --git a/gnocchi/server/cluster.yml b/gnocchi/server/cluster.yml
index 1ad5e44..8e3265e 100644
--- a/gnocchi/server/cluster.yml
+++ b/gnocchi/server/cluster.yml
@@ -17,6 +17,8 @@
         metric_processing_delay: 15
         metric_reporting_delay: 30
       identity:
+        user: ${_param:keystone_gnocchi_username}
+        password: ${_param:keystone_gnocchi_password}
         host: ${_param:openstack_control_address}
         region: ${_param:openstack_region}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/gnocchi/server/single.yml b/gnocchi/server/single.yml
index 43a2c9d..cf6ebfa 100644
--- a/gnocchi/server/single.yml
+++ b/gnocchi/server/single.yml
@@ -5,6 +5,8 @@
     server:
       role: ${_param:openstack_node_role}
       identity:
+        user: ${_param:keystone_gnocchi_username}
+        password: ${_param:keystone_gnocchi_password}
         region: ${_param:openstack_region}
         protocol: ${_param:internal_protocol}
       metricd:
diff --git a/grafana/server/single.yml b/grafana/server/single.yml
index 6303430..c7aa8a9 100644
--- a/grafana/server/single.yml
+++ b/grafana/server/single.yml
@@ -15,7 +15,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: grafana
-        user: grafana
+        user: ${_param:mysql_grafana_username}
         password: ${_param:mysql_grafana_password}
       auth:
         basic:
diff --git a/heat/server/cluster.yml b/heat/server/cluster.yml
index be2f211..89a5885 100644
--- a/heat/server/cluster.yml
+++ b/heat/server/cluster.yml
@@ -34,7 +34,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: heat
-        user: heat
+        user: ${_param:mysql_heat_username}
         password: ${_param:mysql_heat_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -60,7 +60,7 @@
         host: ${_param:cluster_vip_address}
         port: 35357
         tenant: service
-        user: heat
+        user: ${_param:keystone_heat_username}
         password: ${_param:keystone_heat_password}
         protocol: ${_param:cluster_internal_protocol}
       message_queue:
diff --git a/ironic/conductor/storage/cinder.yml b/ironic/conductor/storage/cinder.yml
index 33af09a..22dc687 100644
--- a/ironic/conductor/storage/cinder.yml
+++ b/ironic/conductor/storage/cinder.yml
@@ -11,5 +11,5 @@
         project_domain_id: default
         project_name: service
         user_domain_name: Default
-        username: cinder
+        username: ${_param:keystone_cinder_username}
         region: ${_param:openstack_region}
diff --git a/keystone/client/os_client_config/octavia_identity.yml b/keystone/client/os_client_config/octavia_identity.yml
index 3d84b0c..8dabc3f 100644
--- a/keystone/client/os_client_config/octavia_identity.yml
+++ b/keystone/client/os_client_config/octavia_identity.yml
@@ -12,7 +12,7 @@
                   identity_api_version: '3'
                   interface: 'internal'
                   auth:
-                    username: 'octavia'
+                    username: '${_param:keystone_octavia_username}'
                     password: ${_param:keystone_octavia_password}
                     user_domain_name: 'Default'
                     project_name: 'service'
diff --git a/keystone/client/service/aodh.yml b/keystone/client/service/aodh.yml
index 3d2dae0..704ed1b 100644
--- a/keystone/client/service/aodh.yml
+++ b/keystone/client/service/aodh.yml
@@ -12,6 +12,7 @@
             service:
               user:
                 aodh:
+                  name: ${_param:keystone_aodh_username}
                   is_admin: true
                   password: ${_param:keystone_aodh_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/barbican.yml b/keystone/client/service/barbican.yml
index 1a65afd..23bda00 100644
--- a/keystone/client/service/barbican.yml
+++ b/keystone/client/service/barbican.yml
@@ -14,6 +14,7 @@
             service:
               user:
                 barbican:
+                  name: ${_param:keystone_barbican_username}
                   password: ${_param:keystone_barbican_password}
                   email: ${_param:admin_email}
                   options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/service/billometer.yml b/keystone/client/service/billometer.yml
index 14c570e..002ca9b 100644
--- a/keystone/client/service/billometer.yml
+++ b/keystone/client/service/billometer.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 billometer:
+                  name: ${_param:keystone_billometer_username}
                   is_admin: true
                   password: ${_param:keystone_billometer_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/ceilometer.yml b/keystone/client/service/ceilometer.yml
index 4a21d9c..ff52e6c 100644
--- a/keystone/client/service/ceilometer.yml
+++ b/keystone/client/service/ceilometer.yml
@@ -14,6 +14,7 @@
             service:
               user:
                 ceilometer:
+                  name: ${_param:keystone_ceilometer_username}
                   is_admin: true
                   password: ${_param:keystone_ceilometer_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/cinder.yml b/keystone/client/service/cinder.yml
index ec0b2ca..c36fef2 100644
--- a/keystone/client/service/cinder.yml
+++ b/keystone/client/service/cinder.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 cinder:
+                  name: ${_param:keystone_cinder_username}
                   is_admin: true
                   password: ${_param:keystone_cinder_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/cinder2.yml b/keystone/client/service/cinder2.yml
index fd8cbfc..0115d1b 100644
--- a/keystone/client/service/cinder2.yml
+++ b/keystone/client/service/cinder2.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 cinder:
+                  name: ${_param:keystone_cinder_username}
                   is_admin: true
                   password: ${_param:keystone_cinder_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/cinder3.yml b/keystone/client/service/cinder3.yml
index 6280a7b..cd0df24 100644
--- a/keystone/client/service/cinder3.yml
+++ b/keystone/client/service/cinder3.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 cinder:
+                  name: ${_param:keystone_cinder_username}
                   is_admin: true
                   password: ${_param:keystone_cinder_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/congress.yml b/keystone/client/service/congress.yml
index e0a6754..6c51c33 100644
--- a/keystone/client/service/congress.yml
+++ b/keystone/client/service/congress.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 congress:
+                  name: ${_param:keystone_congress_username}
                   is_admin: true
                   password: ${_param:keystone_congress_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/designate.yml b/keystone/client/service/designate.yml
index 80f3761..b3756b8 100644
--- a/keystone/client/service/designate.yml
+++ b/keystone/client/service/designate.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 designate:
+                  name: ${_param:keystone_designate_username}
                   is_admin: true
                   password: ${_param:keystone_designate_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/glance.yml b/keystone/client/service/glance.yml
index 69b5d8b..67ced92 100644
--- a/keystone/client/service/glance.yml
+++ b/keystone/client/service/glance.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 glance:
+                  name: ${_param:keystone_glance_username}
                   is_admin: true
                   password: ${_param:keystone_glance_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/glare.yml b/keystone/client/service/glare.yml
index 22d619f..8bd8c4c 100644
--- a/keystone/client/service/glare.yml
+++ b/keystone/client/service/glare.yml
@@ -9,6 +9,7 @@
             service:
               user:
                 glance:
+                  name: ${_param:keystone_glance_username}
                   is_admin: true
                   password: ${_param:keystone_glance_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/gnocchi.yml b/keystone/client/service/gnocchi.yml
index 2336a8c..fa38f05 100644
--- a/keystone/client/service/gnocchi.yml
+++ b/keystone/client/service/gnocchi.yml
@@ -14,6 +14,7 @@
             service:
               user:
                 gnocchi:
+                  name: ${_param:keystone_gnocchi_username}
                   is_admin: true
                   password: ${_param:keystone_gnocchi_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/heat.yml b/keystone/client/service/heat.yml
index 9c17b06..6d8a8f0 100644
--- a/keystone/client/service/heat.yml
+++ b/keystone/client/service/heat.yml
@@ -14,6 +14,7 @@
             service:
               user:
                 heat:
+                  name: ${_param:keystone_heat_username}
                   is_admin: true
                   password: ${_param:keystone_heat_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/ironic.yml b/keystone/client/service/ironic.yml
index e350284..ce449c2 100644
--- a/keystone/client/service/ironic.yml
+++ b/keystone/client/service/ironic.yml
@@ -12,6 +12,7 @@
             service:
               user:
                 ironic:
+                  name: ${_param:keystone_ironic_username}
                   is_admin: true
                   password: ${_param:keystone_ironic_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/manila.yml b/keystone/client/service/manila.yml
index 5cc66d2..8f83e18 100644
--- a/keystone/client/service/manila.yml
+++ b/keystone/client/service/manila.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 manila:
+                  name: ${_param:keystone_manila_username}
                   is_admin: true
                   password: ${_param:keystone_manila_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/manila2.yml b/keystone/client/service/manila2.yml
index 8cccc24..2be0481 100644
--- a/keystone/client/service/manila2.yml
+++ b/keystone/client/service/manila2.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 manila:
+                  name: ${_param:keystone_manila_username}
                   is_admin: true
                   password: ${_param:keystone_manila_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/murano.yml b/keystone/client/service/murano.yml
index 1652ac2..9e01c74 100644
--- a/keystone/client/service/murano.yml
+++ b/keystone/client/service/murano.yml
@@ -9,6 +9,7 @@
             service:
               user:
                 murano:
+                  name: ${_param:keystone_murano_username}
                   is_admin: true
                   password: ${_param:keystone_murano_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/neutron.yml b/keystone/client/service/neutron.yml
index 59e4b33..86102a2 100644
--- a/keystone/client/service/neutron.yml
+++ b/keystone/client/service/neutron.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 neutron:
+                  name: ${_param:keystone_neutron_username}
                   is_admin: true
                   password: ${_param:keystone_neutron_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/nova.yml b/keystone/client/service/nova.yml
index 22bbfc9..ddb5ff8 100644
--- a/keystone/client/service/nova.yml
+++ b/keystone/client/service/nova.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 nova:
+                  name: ${_param:keystone_nova_username}
                   is_admin: true
                   password: ${_param:keystone_nova_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/nova21.yml b/keystone/client/service/nova21.yml
index 27a0580..9de386e 100644
--- a/keystone/client/service/nova21.yml
+++ b/keystone/client/service/nova21.yml
@@ -11,6 +11,7 @@
             service:
               user:
                 nova:
+                  name: ${_param:keystone_nova_username}
                   is_admin: true
                   password: ${_param:keystone_nova_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/octavia.yml b/keystone/client/service/octavia.yml
index c5ca83f..b6dab99 100644
--- a/keystone/client/service/octavia.yml
+++ b/keystone/client/service/octavia.yml
@@ -15,6 +15,7 @@
             service:
               user:
                 octavia:
+                  name: ${_param:keystone_octavia_username}
                   is_admin: true
                   password: ${_param:keystone_octavia_password}
                   email: ${_param:admin_email}
@@ -39,7 +40,7 @@
                 admin_path: '/'
         octavia_identity:
           admin:
-            user: octavia
+            user: ${_param:keystone_octavia_username}
             password: ${_param:keystone_octavia_password}
             project: service
             host: ${_param:keystone_service_host}
diff --git a/keystone/client/service/panko.yml b/keystone/client/service/panko.yml
index 43897be..46939ca 100644
--- a/keystone/client/service/panko.yml
+++ b/keystone/client/service/panko.yml
@@ -12,6 +12,7 @@
             service:
               user:
                 panko:
+                  name: ${_param:keystone_panko_username}
                   is_admin: true
                   password: ${_param:keystone_panko_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/radosgw-s3.yml b/keystone/client/service/radosgw-s3.yml
index bcf596f..464ffb2 100644
--- a/keystone/client/service/radosgw-s3.yml
+++ b/keystone/client/service/radosgw-s3.yml
@@ -12,6 +12,7 @@
             service:
               user:
                 swift:
+                  name: ${_param:keystone_swift_username}
                   is_admin: true
                   password: ${_param:keystone_swift_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/radosgw-swift.yml b/keystone/client/service/radosgw-swift.yml
index c8b6569..df88eb3 100644
--- a/keystone/client/service/radosgw-swift.yml
+++ b/keystone/client/service/radosgw-swift.yml
@@ -14,6 +14,7 @@
             service:
               user:
                 swift:
+                  name: ${_param:keystone_swift_username}
                   is_admin: true
                   password: ${_param:keystone_swift_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/sahara.yml b/keystone/client/service/sahara.yml
index 8d88168..2ae7e42 100644
--- a/keystone/client/service/sahara.yml
+++ b/keystone/client/service/sahara.yml
@@ -9,6 +9,7 @@
             service:
               user:
                 sahara:
+                  name: ${_param:keystone_sahara_username}
                   is_admin: true
                   password: ${_param:keystone_sahara_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/swift-s3.yml b/keystone/client/service/swift-s3.yml
index 36050a4..5df5db8 100644
--- a/keystone/client/service/swift-s3.yml
+++ b/keystone/client/service/swift-s3.yml
@@ -9,6 +9,7 @@
             service:
               user:
                 swift:
+                  name: ${_param:keystone_swift_username}
                   is_admin: true
                   password: ${_param:keystone_swift_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/swift.yml b/keystone/client/service/swift.yml
index ddcaf26..5398f40 100644
--- a/keystone/client/service/swift.yml
+++ b/keystone/client/service/swift.yml
@@ -9,6 +9,7 @@
             service:
               user:
                 swift:
+                  name: ${_param:keystone_swift_username}
                   is_admin: true
                   password: ${_param:keystone_swift_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/service/tacker.yml b/keystone/client/service/tacker.yml
index e1c7019..69fbc62 100644
--- a/keystone/client/service/tacker.yml
+++ b/keystone/client/service/tacker.yml
@@ -10,6 +10,7 @@
             service:
               user:
                 tacker:
+                  name: ${_param:keystone_tacker_username}
                   is_admin: true
                   password: ${_param:keystone_tacker_password}
                   email: ${_param:admin_email}
diff --git a/keystone/client/v3/service/aodh.yml b/keystone/client/v3/service/aodh.yml
index a4f217c..af9b9b2 100644
--- a/keystone/client/v3/service/aodh.yml
+++ b/keystone/client/v3/service/aodh.yml
@@ -9,6 +9,7 @@
           cloud_name: 'admin_identity'
           users:
             aodh:
+              name: ${_param:keystone_aodh_username}
               password: ${_param:keystone_aodh_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/barbican.yml b/keystone/client/v3/service/barbican.yml
index f008abc..9708bdc 100644
--- a/keystone/client/v3/service/barbican.yml
+++ b/keystone/client/v3/service/barbican.yml
@@ -14,6 +14,7 @@
               enabled: true
           users:
             barbican:
+              name: ${_param:keystone_barbican_username}
               password: ${_param:keystone_barbican_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/billometer.yml b/keystone/client/v3/service/billometer.yml
index 9e115eb..6ab12ed 100644
--- a/keystone/client/v3/service/billometer.yml
+++ b/keystone/client/v3/service/billometer.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             billometer:
+              name: ${_param:keystone_billometer_username}
               password: ${_param:keystone_billometer_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/ceilometer.yml b/keystone/client/v3/service/ceilometer.yml
index 85af602..3cdb748 100644
--- a/keystone/client/v3/service/ceilometer.yml
+++ b/keystone/client/v3/service/ceilometer.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             ceilometer:
+              name: ${_param:keystone_ceilometer_username}
               password: ${_param:keystone_ceilometer_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/cinder.yml b/keystone/client/v3/service/cinder.yml
index 1dd279a..b94b713 100644
--- a/keystone/client/v3/service/cinder.yml
+++ b/keystone/client/v3/service/cinder.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             cinder:
+              name: ${_param:keystone_cinder_username}
               password: ${_param:keystone_cinder_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/cinder2.yml b/keystone/client/v3/service/cinder2.yml
index 4d49d2b..e392a6a 100644
--- a/keystone/client/v3/service/cinder2.yml
+++ b/keystone/client/v3/service/cinder2.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             cinder:
+              name: ${_param:keystone_cinder_username}
               password: ${_param:keystone_cinder_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/cinder3.yml b/keystone/client/v3/service/cinder3.yml
index a4465ac..1ded99a 100644
--- a/keystone/client/v3/service/cinder3.yml
+++ b/keystone/client/v3/service/cinder3.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             cinder:
+              name: ${_param:keystone_cinder_username}
               password: ${_param:keystone_cinder_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/congress.yml b/keystone/client/v3/service/congress.yml
index 0d34181..936f71c 100644
--- a/keystone/client/v3/service/congress.yml
+++ b/keystone/client/v3/service/congress.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             congress:
+              name: ${_param:keystone_congress_username}
               password: ${_param:keystone_congress_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/designate.yml b/keystone/client/v3/service/designate.yml
index 271ea22..544a172 100644
--- a/keystone/client/v3/service/designate.yml
+++ b/keystone/client/v3/service/designate.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             designate:
+              name: ${_param:keystone_designate_username}
               password: ${_param:keystone_designate_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/glance.yml b/keystone/client/v3/service/glance.yml
index 0e01709..3abc3c8 100644
--- a/keystone/client/v3/service/glance.yml
+++ b/keystone/client/v3/service/glance.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             glance:
+              name: ${_param:keystone_glance_username}
               password: ${_param:keystone_glance_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/gnocchi.yml b/keystone/client/v3/service/gnocchi.yml
index 63241db..da3dfa7 100644
--- a/keystone/client/v3/service/gnocchi.yml
+++ b/keystone/client/v3/service/gnocchi.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             gnocchi:
+              name: ${_param:keystone_gnocchi_username}
               password: ${_param:keystone_gnocchi_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/heat.yml b/keystone/client/v3/service/heat.yml
index 54c8f0b..2163292 100644
--- a/keystone/client/v3/service/heat.yml
+++ b/keystone/client/v3/service/heat.yml
@@ -14,6 +14,7 @@
               enabled: true
           users:
             heat:
+              name: ${_param:keystone_heat_username}
               password: ${_param:keystone_heat_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/ironic.yml b/keystone/client/v3/service/ironic.yml
index bd2795b..5dc431e 100644
--- a/keystone/client/v3/service/ironic.yml
+++ b/keystone/client/v3/service/ironic.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             ironic:
+              name: ${_param:keystone_ironic_username}
               password: ${_param:keystone_ironic_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/manila.yml b/keystone/client/v3/service/manila.yml
index bb90159..6519b84 100644
--- a/keystone/client/v3/service/manila.yml
+++ b/keystone/client/v3/service/manila.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             manila:
+              name: ${_param:keystone_manila_username}
               password: ${_param:keystone_manila_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/manila2.yml b/keystone/client/v3/service/manila2.yml
index f5771ad..1ccf704 100644
--- a/keystone/client/v3/service/manila2.yml
+++ b/keystone/client/v3/service/manila2.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             manila:
+              name: ${_param:keystone_manila_username}
               password: ${_param:keystone_manila_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/neutron.yml b/keystone/client/v3/service/neutron.yml
index 6af16f9..1d6dae8 100644
--- a/keystone/client/v3/service/neutron.yml
+++ b/keystone/client/v3/service/neutron.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             neutron:
+              name: ${_param:keystone_neutron_username}
               password: ${_param:keystone_neutron_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/nova.yml b/keystone/client/v3/service/nova.yml
index d0c7366..2015900 100644
--- a/keystone/client/v3/service/nova.yml
+++ b/keystone/client/v3/service/nova.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             nova:
+              name: ${_param:keystone_nova_username}
               password: ${_param:keystone_nova_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/nova21.yml b/keystone/client/v3/service/nova21.yml
index 85bd29f..6ed684b 100644
--- a/keystone/client/v3/service/nova21.yml
+++ b/keystone/client/v3/service/nova21.yml
@@ -7,6 +7,7 @@
         v3:
           users:
             nova:
+              name: ${_param:keystone_nova_username}
               password: ${_param:keystone_nova_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/octavia.yml b/keystone/client/v3/service/octavia.yml
index 54c8bc9..035dbfb 100644
--- a/keystone/client/v3/service/octavia.yml
+++ b/keystone/client/v3/service/octavia.yml
@@ -24,6 +24,7 @@
               enabled: true
           users:
             octavia:
+              name: ${_param:keystone_octavia_username}
               password: ${_param:keystone_octavia_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/panko.yml b/keystone/client/v3/service/panko.yml
index 226f601..1620d91 100644
--- a/keystone/client/v3/service/panko.yml
+++ b/keystone/client/v3/service/panko.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             panko:
+              name: ${_param:keystone_panko_username}
               password: ${_param:keystone_panko_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/radosgw-s3.yml b/keystone/client/v3/service/radosgw-s3.yml
index 1a7ae3c..0da4b0b 100644
--- a/keystone/client/v3/service/radosgw-s3.yml
+++ b/keystone/client/v3/service/radosgw-s3.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             swift:
+              name: ${_param:keystone_swift_username}
               password: ${_param:keystone_swift_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/radosgw-swift.yml b/keystone/client/v3/service/radosgw-swift.yml
index 2e78bb9..cf1290d 100644
--- a/keystone/client/v3/service/radosgw-swift.yml
+++ b/keystone/client/v3/service/radosgw-swift.yml
@@ -12,6 +12,7 @@
               enabled: true
           users:
             swift:
+              name: ${_param:keystone_swift_username}
               password: ${_param:keystone_swift_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/client/v3/service/tacker.yml b/keystone/client/v3/service/tacker.yml
index bddca05..4d4396e 100644
--- a/keystone/client/v3/service/tacker.yml
+++ b/keystone/client/v3/service/tacker.yml
@@ -8,6 +8,7 @@
         v3:
           users:
             tacker:
+              name: ${_param:keystone_tacker_username}
               password: ${_param:keystone_tacker_password}
               email: ${_param:admin_email}
               options: ${_param:openstack_service_user_options}
diff --git a/keystone/server/cluster.yml b/keystone/server/cluster.yml
index abb8188..e0d01d9 100644
--- a/keystone/server/cluster.yml
+++ b/keystone/server/cluster.yml
@@ -48,7 +48,7 @@
         host: ${_param:openstack_database_address}
         name: keystone
         password: ${_param:mysql_keystone_password}
-        user: keystone
+        user: ${_param:mysql_keystone_username}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_keystone_ssl_ca_file}
diff --git a/keystone/server/single.yml b/keystone/server/single.yml
index 014a6dc..8c5e594 100644
--- a/keystone/server/single.yml
+++ b/keystone/server/single.yml
@@ -43,7 +43,7 @@
         host: ${_param:single_address}
         name: keystone
         password: ${_param:mysql_keystone_password}
-        user: keystone
+        user: ${_param:mysql_keystone_username}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_keystone_ssl_ca_file}
diff --git a/manila/common/cluster.yml b/manila/common/cluster.yml
index 57ced1d..73c679b 100644
--- a/manila/common/cluster.yml
+++ b/manila/common/cluster.yml
@@ -28,7 +28,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: manila
-        user: manila
+        user: ${_param:mysql_manila_username}
         password: ${_param:mysql_manila_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -42,7 +42,7 @@
         region: ${_param:openstack_region}
         host: ${_param:manila_cluster_vip_address}
         port: 35357
-        user: manila
+        user: ${_param:keystone_manila_username}
         password: ${_param:keystone_manila_password}
         tenant: service
         auth_type: password
diff --git a/manila/common/single.yml b/manila/common/single.yml
index 00f42eb..fe59263 100644
--- a/manila/common/single.yml
+++ b/manila/common/single.yml
@@ -26,7 +26,7 @@
         host: ${_param:single_address}
         port: 3306
         name: manila
-        user: manila
+        user: ${_param:mysql_manila_username}
         password: ${_param:mysql_manila_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -40,7 +40,7 @@
         region: ${_param:openstack_region}
         host: ${_param:single_address}
         port: 35357
-        user: manila
+        user: ${_param:keystone_manila_username}
         password: ${_param:keystone_manila_password}
         tenant: service
         auth_type: password
diff --git a/murano/server/cluster.yml b/murano/server/cluster.yml
index a9b1f6d..73dcb38 100644
--- a/murano/server/cluster.yml
+++ b/murano/server/cluster.yml
@@ -19,14 +19,14 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: murano
-        user: murano
+        user: ${_param:mysql_murano_username}
         password: ${_param:mysql_murano_password}
       identity:
         engine: keystone
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: murano
+        user: ${_param:keystone_murano_username}
         password: ${_param:keystone_murano_password}
       message_queue:
         engine: rabbitmq
diff --git a/murano/server/single.yml b/murano/server/single.yml
index 8c85019..1512893 100644
--- a/murano/server/single.yml
+++ b/murano/server/single.yml
@@ -17,14 +17,14 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: murano
-        user: murano
+        user: ${_param:mysql_murano_username}
         password: ${_param:mysql_murano_password}
       identity:
         engine: keystone
         host: ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: murano
+        user: ${_param:keystone_murano_username}
         password: ${_param:keystone_murano_password}
       message_queue:
         engine: rabbitmq
diff --git a/mysql/client/database/aodh.yml b/mysql/client/database/aodh.yml
index 92a2b29..b8842e9 100644
--- a/mysql/client/database/aodh.yml
+++ b/mysql/client/database/aodh.yml
@@ -7,11 +7,11 @@
             aodh:
               encoding: utf8
               users:
-              - name: aodh
+              - name: ${_param:mysql_aodh_username}
                 password: ${_param:mysql_aodh_password}
                 host: '%'
                 rights: all
-              - name: aodh
+              - name: ${_param:mysql_aodh_username}
                 password: ${_param:mysql_aodh_password}
                 host: ${_param:single_address}
                 rights: all
\ No newline at end of file
diff --git a/mysql/client/database/barbican.yml b/mysql/client/database/barbican.yml
index f9fe6dd..a900905 100644
--- a/mysql/client/database/barbican.yml
+++ b/mysql/client/database/barbican.yml
@@ -7,11 +7,11 @@
             barbican:
               encoding: utf8
               users:
-              - name: barbican
+              - name: ${_param:mysql_barbican_username}
                 password: ${_param:mysql_barbican_password}
                 host: '%'
                 rights: all
-              - name: barbican
+              - name: ${_param:mysql_barbican_username}
                 password: ${_param:mysql_barbican_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/ceilometer.yml b/mysql/client/database/ceilometer.yml
index 436bf97..4cf65a1 100644
--- a/mysql/client/database/ceilometer.yml
+++ b/mysql/client/database/ceilometer.yml
@@ -7,11 +7,11 @@
             ceilometer:
               encoding: utf8
               users:
-              - name: ceilometer
+              - name: ${_param:mysql_ceilometer_username}
                 password: ${_param:mysql_ceilometer_password}
                 host: '%'
                 rights: all
-              - name: ceilometer
+              - name: ${_param:mysql_ceilometer_username}
                 password: ${_param:mysql_ceilometer_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/cinder.yml b/mysql/client/database/cinder.yml
index 4d6783b..280b35b 100644
--- a/mysql/client/database/cinder.yml
+++ b/mysql/client/database/cinder.yml
@@ -7,11 +7,11 @@
             cinder:
               encoding: utf8
               users:
-              - name: cinder
+              - name: ${_param:mysql_cinder_username}
                 password: ${_param:mysql_cinder_password}
                 host: '%'
                 rights: all
-              - name: cinder
+              - name: ${_param:mysql_cinder_username}
                 password: ${_param:mysql_cinder_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/designate.yml b/mysql/client/database/designate.yml
index cee6ff1..f6301a8 100644
--- a/mysql/client/database/designate.yml
+++ b/mysql/client/database/designate.yml
@@ -7,11 +7,11 @@
             designate:
               encoding: utf8
               users:
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: '%'
                 rights: all
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: ${_param:single_address}
                 rights: all
\ No newline at end of file
diff --git a/mysql/client/database/designate_pool_manager.yml b/mysql/client/database/designate_pool_manager.yml
index 6913bd4..09352b4 100644
--- a/mysql/client/database/designate_pool_manager.yml
+++ b/mysql/client/database/designate_pool_manager.yml
@@ -7,11 +7,11 @@
             designate_pool_manager:
               encoding: utf8
               users:
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: '%'
                 rights: all
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/glance.yml b/mysql/client/database/glance.yml
index b93b343..6a8a4d1 100644
--- a/mysql/client/database/glance.yml
+++ b/mysql/client/database/glance.yml
@@ -7,11 +7,11 @@
             glance:
               encoding: utf8
               users:
-              - name: glance
+              - name: ${_param:mysql_glance_username}
                 password: ${_param:mysql_glance_password}
                 host: '%'
                 rights: all
-              - name: glance
+              - name: ${_param:mysql_glance_username}
                 password: ${_param:mysql_glance_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/grafana.yml b/mysql/client/database/grafana.yml
index a2899f0..26bc3cd 100644
--- a/mysql/client/database/grafana.yml
+++ b/mysql/client/database/grafana.yml
@@ -7,11 +7,11 @@
             grafana:
               encoding: utf8
               users:
-              - name: grafana
+              - name: ${_param:mysql_grafana_username}
                 password: ${_param:mysql_grafana_password}
                 host: '%'
                 rights: all
-              - name: grafana
+              - name: ${_param:mysql_grafana_username}
                 password: ${_param:mysql_grafana_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/heat.yml b/mysql/client/database/heat.yml
index 51aae8f..36cfdc5 100644
--- a/mysql/client/database/heat.yml
+++ b/mysql/client/database/heat.yml
@@ -7,11 +7,11 @@
             heat:
               encoding: utf8
               users:
-              - name: heat
+              - name: ${_param:mysql_heat_username}
                 password: ${_param:mysql_heat_password}
                 host: '%'
                 rights: all
-              - name: heat
+              - name: ${_param:mysql_heat_username}
                 password: ${_param:mysql_heat_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/ironic.yml b/mysql/client/database/ironic.yml
index e142e64..9441f74 100644
--- a/mysql/client/database/ironic.yml
+++ b/mysql/client/database/ironic.yml
@@ -7,11 +7,11 @@
             ironic:
               encoding: utf8
               users:
-              - name: ironic
+              - name: ${_param:mysql_ironic_username}
                 password: ${_param:mysql_ironic_password}
                 host: '%'
                 rights: all
-              - name: ironic
+              - name: ${_param:mysql_ironic_username}
                 password: ${_param:mysql_ironic_password}
                 host: ${_param:cluster_local_address}
                 rights: all
diff --git a/mysql/client/database/keystone.yml b/mysql/client/database/keystone.yml
index 09885dd..ebd4810 100644
--- a/mysql/client/database/keystone.yml
+++ b/mysql/client/database/keystone.yml
@@ -7,11 +7,11 @@
             keystone:
               encoding: utf8
               users:
-              - name: keystone
+              - name: ${_param:mysql_keystone_username}
                 password: ${_param:mysql_keystone_password}
                 host: '%'
                 rights: all
-              - name: keystone
+              - name: ${_param:mysql_keystone_username}
                 password: ${_param:mysql_keystone_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/murano.yml b/mysql/client/database/murano.yml
index 561ea3d..5a8b41e 100644
--- a/mysql/client/database/murano.yml
+++ b/mysql/client/database/murano.yml
@@ -7,11 +7,11 @@
             murano:
               encoding: utf8
               users:
-              - name: murano
+              - name: ${_param:mysql_murano_username}
                 password: ${_param:mysql_murano_password}
                 host: '%'
                 rights: all
-              - name: murano
+              - name: ${_param:mysql_murano_username}
                 password: ${_param:mysql_murano_password}
                 host: ${_param:single_address}
                 rights: all
\ No newline at end of file
diff --git a/mysql/client/database/neutron.yml b/mysql/client/database/neutron.yml
index 94d9722..7481797 100644
--- a/mysql/client/database/neutron.yml
+++ b/mysql/client/database/neutron.yml
@@ -7,11 +7,11 @@
             neutron:
               encoding: utf8
               users:
-              - name: neutron
+              - name: ${_param:mysql_neutron_username}
                 password: ${_param:mysql_neutron_password}
                 host: '%'
                 rights: all
-              - name: neutron
+              - name: ${_param:mysql_neutron_username}
                 password: ${_param:mysql_neutron_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/nova.yml b/mysql/client/database/nova.yml
index 930b280..da2a4ae 100644
--- a/mysql/client/database/nova.yml
+++ b/mysql/client/database/nova.yml
@@ -7,11 +7,11 @@
             nova:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/nova_api.yml b/mysql/client/database/nova_api.yml
index a8fbd59..96862ad 100644
--- a/mysql/client/database/nova_api.yml
+++ b/mysql/client/database/nova_api.yml
@@ -7,22 +7,22 @@
             nova_api:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
             nova_cell0:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/octavia.yml b/mysql/client/database/octavia.yml
index 6c31ece..22fa442 100644
--- a/mysql/client/database/octavia.yml
+++ b/mysql/client/database/octavia.yml
@@ -7,11 +7,11 @@
             octavia:
               encoding: utf8
               users:
-              - name: octavia
+              - name: ${_param:mysql_octavia_username}
                 password: ${_param:mysql_octavia_password}
                 host: '%'
                 rights: all
-              - name: octavia
+              - name: ${_param:mysql_octavia_username}
                 password: ${_param:mysql_octavia_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/panko.yml b/mysql/client/database/panko.yml
index e0463ef..848e32f 100644
--- a/mysql/client/database/panko.yml
+++ b/mysql/client/database/panko.yml
@@ -7,11 +7,11 @@
             panko:
               encoding: utf8
               users:
-              - name: panko
+              - name: ${_param:mysql_panko_username}
                 password: ${_param:mysql_panko_password}
                 host: '%'
                 rights: all
-              - name: panko
+              - name: ${_param:mysql_panko_username}
                 password: ${_param:mysql_panko_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database/sahara.yml b/mysql/client/database/sahara.yml
index 86497d8..3db7e3e 100644
--- a/mysql/client/database/sahara.yml
+++ b/mysql/client/database/sahara.yml
@@ -7,11 +7,11 @@
             sahara:
               encoding: utf8
               users:
-              - name: sahara
+              - name: ${_param:mysql_sahara_username}
                 password: ${_param:mysql_sahara_password}
                 host: '%'
                 rights: all
-              - name: sahara
+              - name: ${_param:mysql_sahara_username}
                 password: ${_param:mysql_sahara_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/aodh.yml b/mysql/client/database_upgrade/aodh.yml
index d363161..e351db3 100644
--- a/mysql/client/database_upgrade/aodh.yml
+++ b/mysql/client/database_upgrade/aodh.yml
@@ -7,11 +7,11 @@
             aodh_upgrade:
               encoding: utf8
               users:
-              - name: aodh
+              - name: ${_param:mysql_aodh_username}
                 password: ${_param:mysql_aodh_password}
                 host: '%'
                 rights: all
-              - name: aodh
+              - name: ${_param:mysql_aodh_username}
                 password: ${_param:mysql_aodh_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/ceilometer.yml b/mysql/client/database_upgrade/ceilometer.yml
index 5344b4b..28f6a26 100644
--- a/mysql/client/database_upgrade/ceilometer.yml
+++ b/mysql/client/database_upgrade/ceilometer.yml
@@ -7,11 +7,11 @@
             ceilometer_upgrade:
               encoding: utf8
               users:
-              - name: ceilometer
+              - name: ${_param:mysql_ceilometer_username}
                 password: ${_param:mysql_ceilometer_password}
                 host: '%'
                 rights: all
-              - name: ceilometer
+              - name: ${_param:mysql_ceilometer_username}
                 password: ${_param:mysql_ceilometer_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/cinder.yml b/mysql/client/database_upgrade/cinder.yml
index bafc70d..a72823e 100644
--- a/mysql/client/database_upgrade/cinder.yml
+++ b/mysql/client/database_upgrade/cinder.yml
@@ -7,11 +7,11 @@
             cinder_upgrade:
               encoding: utf8
               users:
-              - name: cinder
+              - name: ${_param:mysql_cinder_username}
                 password: ${_param:mysql_cinder_password}
                 host: '%'
                 rights: all
-              - name: cinder
+              - name: ${_param:mysql_cinder_username}
                 password: ${_param:mysql_cinder_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/designate.yml b/mysql/client/database_upgrade/designate.yml
index 48b7fce..7f13286 100644
--- a/mysql/client/database_upgrade/designate.yml
+++ b/mysql/client/database_upgrade/designate.yml
@@ -7,11 +7,11 @@
             designate_upgrade:
               encoding: utf8
               users:
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: '%'
                 rights: all
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/designate_pool_manager.yml b/mysql/client/database_upgrade/designate_pool_manager.yml
index 26dd975..abc9491 100644
--- a/mysql/client/database_upgrade/designate_pool_manager.yml
+++ b/mysql/client/database_upgrade/designate_pool_manager.yml
@@ -7,11 +7,11 @@
             designate_pool_manager_upgrade:
               encoding: utf8
               users:
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: '%'
                 rights: all
-              - name: designate
+              - name: ${_param:mysql_designate_username}
                 password: ${_param:mysql_designate_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/glance.yml b/mysql/client/database_upgrade/glance.yml
index bebe604..d1690ae 100644
--- a/mysql/client/database_upgrade/glance.yml
+++ b/mysql/client/database_upgrade/glance.yml
@@ -7,11 +7,11 @@
             glance_upgrade:
               encoding: utf8
               users:
-              - name: glance
+              - name: ${_param:mysql_glance_username}
                 password: ${_param:mysql_glance_password}
                 host: '%'
                 rights: all
-              - name: glance
+              - name: ${_param:mysql_glance_username}
                 password: ${_param:mysql_glance_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/grafana.yml b/mysql/client/database_upgrade/grafana.yml
index 7759a66..30c9d35 100644
--- a/mysql/client/database_upgrade/grafana.yml
+++ b/mysql/client/database_upgrade/grafana.yml
@@ -7,11 +7,11 @@
             grafana_upgrade:
               encoding: utf8
               users:
-              - name: grafana
+              - name: ${_param:mysql_grafana_username}
                 password: ${_param:mysql_grafana_password}
                 host: '%'
                 rights: all
-              - name: grafana
+              - name: ${_param:mysql_grafana_username}
                 password: ${_param:mysql_grafana_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/heat.yml b/mysql/client/database_upgrade/heat.yml
index 24e4cb1..1dd29cd 100644
--- a/mysql/client/database_upgrade/heat.yml
+++ b/mysql/client/database_upgrade/heat.yml
@@ -7,11 +7,11 @@
             heat_upgrade:
               encoding: utf8
               users:
-              - name: heat
+              - name: ${_param:mysql_heat_username}
                 password: ${_param:mysql_heat_password}
                 host: '%'
                 rights: all
-              - name: heat
+              - name: ${_param:mysql_heat_username}
                 password: ${_param:mysql_heat_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/keystone.yml b/mysql/client/database_upgrade/keystone.yml
index 8265662..c9b884f 100644
--- a/mysql/client/database_upgrade/keystone.yml
+++ b/mysql/client/database_upgrade/keystone.yml
@@ -7,11 +7,11 @@
             keystone_upgrade:
               encoding: utf8
               users:
-              - name: keystone
+              - name: ${_param:mysql_keystone_username}
                 password: ${_param:mysql_keystone_password}
                 host: '%'
                 rights: all
-              - name: keystone
+              - name: ${_param:mysql_keystone_username}
                 password: ${_param:mysql_keystone_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/murano.yml b/mysql/client/database_upgrade/murano.yml
index 2223ce6..45342a8 100644
--- a/mysql/client/database_upgrade/murano.yml
+++ b/mysql/client/database_upgrade/murano.yml
@@ -7,11 +7,11 @@
             murano_upgrade:
               encoding: utf8
               users:
-              - name: murano
+              - name: ${_param:mysql_murano_username}
                 password: ${_param:mysql_murano_password}
                 host: '%'
                 rights: all
-              - name: murano
+              - name: ${_param:mysql_murano_username}
                 password: ${_param:mysql_murano_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/neutron.yml b/mysql/client/database_upgrade/neutron.yml
index 7dd723c..ee5e200 100644
--- a/mysql/client/database_upgrade/neutron.yml
+++ b/mysql/client/database_upgrade/neutron.yml
@@ -7,11 +7,11 @@
             neutron_upgrade:
               encoding: utf8
               users:
-              - name: neutron
+              - name: ${_param:mysql_neutron_username}
                 password: ${_param:mysql_neutron_password}
                 host: '%'
                 rights: all
-              - name: neutron
+              - name: ${_param:mysql_neutron_username}
                 password: ${_param:mysql_neutron_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/nova.yml b/mysql/client/database_upgrade/nova.yml
index 699c9c3..2a0e246 100644
--- a/mysql/client/database_upgrade/nova.yml
+++ b/mysql/client/database_upgrade/nova.yml
@@ -7,11 +7,11 @@
             nova_upgrade:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/nova_api.yml b/mysql/client/database_upgrade/nova_api.yml
index 8bb33c8..d9815d5 100644
--- a/mysql/client/database_upgrade/nova_api.yml
+++ b/mysql/client/database_upgrade/nova_api.yml
@@ -7,11 +7,11 @@
             nova_upgrade_api:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
@@ -23,11 +23,11 @@
             nova_upgrade_cell0:
               encoding: utf8
               users:
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: '%'
                 rights: all
-              - name: nova
+              - name: ${_param:mysql_nova_username}
                 password: ${_param:mysql_nova_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/mysql/client/database_upgrade/sahara.yml b/mysql/client/database_upgrade/sahara.yml
index 73618d0..414b3dc 100644
--- a/mysql/client/database_upgrade/sahara.yml
+++ b/mysql/client/database_upgrade/sahara.yml
@@ -7,11 +7,11 @@
             sahara_upgrade:
               encoding: utf8
               users:
-              - name: sahara
+              - name: ${_param:mysql_sahara_username}
                 password: ${_param:mysql_sahara_password}
                 host: '%'
                 rights: all
-              - name: sahara
+              - name: ${_param:mysql_sahara_username}
                 password: ${_param:mysql_sahara_password}
                 host: ${_param:single_address}
                 rights: all
diff --git a/neutron/control/cluster.yml b/neutron/control/cluster.yml
index 91b410b..fe6f464 100644
--- a/neutron/control/cluster.yml
+++ b/neutron/control/cluster.yml
@@ -15,6 +15,9 @@
           version: latest
   neutron:
     server:
+      compute:
+        user: ${_param:keystone_nova_username}
+        password: ${_param:keystone_nova_password}
       message_queue:
         port: ${_param:openstack_rabbitmq_port}
         members:
@@ -29,6 +32,8 @@
         ssl:
           enabled: ${_param:rabbitmq_ssl_enabled}
       database:
+        user: ${_param:mysql_neutron_username}
+        password: ${_param:mysql_neutron_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_neutron_ssl_ca_file}
@@ -38,4 +43,6 @@
           enabled: ${_param:galera_ssl_enabled}
       role: ${_param:openstack_node_role}
       identity:
+        user: ${_param:keystone_neutron_username}
+        password: ${_param:keystone_neutron_password}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/neutron/control/ovn/single.yml b/neutron/control/ovn/single.yml
index f3dd749..73702fd 100644
--- a/neutron/control/ovn/single.yml
+++ b/neutron/control/ovn/single.yml
@@ -29,8 +29,12 @@
       compute:
         region: ${_param:openstack_region}
       database:
+        user: ${_param:mysql_neutron_username}
+        password: ${_param:mysql_neutron_password}
         host: ${_param:openstack_database_address}
       identity:
+        user: ${_param:keystone_neutron_username}
+        password: ${_param:keystone_neutron_password}
         region: ${_param:openstack_region}
       message_queue:
         members:
diff --git a/neutron/control/single.yml b/neutron/control/single.yml
index 803f12f..bc025eb 100644
--- a/neutron/control/single.yml
+++ b/neutron/control/single.yml
@@ -16,6 +16,8 @@
     server:
       role: ${_param:openstack_node_role}
       database:
+        user: ${_param:mysql_neutron_username}
+        password: ${_param:mysql_neutron_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_neutron_ssl_ca_file}
@@ -33,4 +35,6 @@
         ssl:
           enabled: ${_param:rabbitmq_ssl_enabled}
       identity:
+        user: ${_param:keystone_neutron_username}
+        password: ${_param:keystone_neutron_password}
         protocol: ${_param:internal_protocol}
diff --git a/nova/compute/cluster.yml b/nova/compute/cluster.yml
index 4cc9ccf..1fdb3bd 100644
--- a/nova/compute/cluster.yml
+++ b/nova/compute/cluster.yml
@@ -31,14 +31,14 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: nova
-        user: nova
+        user: ${_param:mysql_nova_username}
         password: ${_param:mysql_nova_password}
       identity:
         engine: keystone
         region: ${_param:openstack_region}
         host: ${_param:cluster_vip_address}
         port: 35357
-        user: nova
+        user: ${_param:keystone_nova_username}
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
@@ -73,7 +73,7 @@
         region: ${_param:openstack_region}
         host: ${_param:neutron_service_host}
         port: 9696
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         tenant: service
         password: ${_param:keystone_neutron_password}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/nova/compute/single.yml b/nova/compute/single.yml
index e6b1a5b..2c47148 100644
--- a/nova/compute/single.yml
+++ b/nova/compute/single.yml
@@ -30,13 +30,13 @@
         host: ${_param:control_address}
         port: 3306
         name: nova
-        user: nova
+        user: ${_param:mysql_nova_username}
         password: ${_param:mysql_nova_password}
       identity:
         engine: keystone
         host: ${_param:control_address}
         port: 35357
-        user: nova
+        user: ${_param:keystone_nova_username}
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
diff --git a/nova/compute_ironic/cluster.yml b/nova/compute_ironic/cluster.yml
index 7796fa1..8b57948 100644
--- a/nova/compute_ironic/cluster.yml
+++ b/nova/compute_ironic/cluster.yml
@@ -14,14 +14,14 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: nova
-        user: nova
+        user: ${_param:mysql_nova_username}
         password: ${_param:mysql_nova_password}
       identity:
         engine: keystone
         region: ${_param:openstack_region}
         host: ${_param:cluster_vip_address}
         port: 35357
-        user: nova
+        user: ${_param:keystone_nova_username}
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
@@ -42,7 +42,7 @@
         region: ${_param:openstack_region}
         host: ${_param:neutron_service_host}
         port: 9696
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         tenant: service
         password: ${_param:keystone_neutron_password}
         protocol: ${_param:cluster_internal_protocol}
@@ -52,7 +52,7 @@
         region: ${_param:openstack_region}
         host: ${_param:ironic_service_host}
         port: 6385
-        user: ironic
+        user: ${_param:keystone_ironic_username}
         tenant: service
         password: ${_param:keystone_ironic_password}
         auth_type: password
diff --git a/nova/compute_ironic/single.yml b/nova/compute_ironic/single.yml
index 718ec59..bc3ee7c 100644
--- a/nova/compute_ironic/single.yml
+++ b/nova/compute_ironic/single.yml
@@ -14,14 +14,14 @@
         host: ${_param:control_address}
         port: 3306
         name: nova
-        user: nova
+        user: ${_param:mysql_nova_username}
         password: ${_param:mysql_nova_password}
       identity:
         engine: keystone
         region: ${_param:openstack_region}
         host: ${_param:control_address}
         port: 35357
-        user: nova
+        user: ${_param:keystone_nova_username}
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
@@ -39,7 +39,7 @@
         region: ${_param:openstack_region}
         host: ${_param:control_address}
         port: 9696
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         tenant: service
         password: ${_param:keystone_neutron_password}
         protocol: ${_param:cluster_internal_protocol}
@@ -49,7 +49,7 @@
         region: ${_param:openstack_region}
         host: ${_param:control_address}
         port: 6385
-        user: ironic
+        user: ${_param:keystone_ironic_username}
         tenant: service
         password: ${_param:keystone_ironic_password}
         protocol: ${_param:cluster_internal_protocol}
diff --git a/nova/control/cluster.yml b/nova/control/cluster.yml
index 437f3c1..325c6a5 100644
--- a/nova/control/cluster.yml
+++ b/nova/control/cluster.yml
@@ -43,7 +43,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: nova
-        user: nova
+        user: ${_param:mysql_nova_username}
         password: ${_param:mysql_nova_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
@@ -57,7 +57,7 @@
         region: ${_param:openstack_region}
         host: ${_param:cluster_vip_address}
         port: 35357
-        user: nova
+        user: ${_param:keystone_nova_username}
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
@@ -95,7 +95,7 @@
         engine: neutron
         region: ${_param:openstack_region}
         host: ${_param:neutron_service_host}
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         password: ${_param:keystone_neutron_password}
         port: 9696
         mtu: 1500
diff --git a/opencontrail/compute/single.yml b/opencontrail/compute/single.yml
index 2211a69..c016479 100644
--- a/opencontrail/compute/single.yml
+++ b/opencontrail/compute/single.yml
@@ -27,7 +27,7 @@
       network:
         engine: keystone
         host: ${_param:control_address}
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         password: ${_param:keystone_neutron_password}
         tenant: service
   neutron:
@@ -37,7 +37,7 @@
         engine: keystone
         host: ${_param:control_address}
         port: 35357
-        user: neutron
+        user: ${_param:keystone_neutron_username}
         password: ${_param:keystone_neutron_password}
         tenant: service
 
diff --git a/panko/server/cluster.yml b/panko/server/cluster.yml
index b6e87bb..3257a99 100644
--- a/panko/server/cluster.yml
+++ b/panko/server/cluster.yml
@@ -24,9 +24,13 @@
       role: ${_param:openstack_node_role}
       event_time_to_live: ${_param:panko_event_time_to_live}
       identity:
+        user: ${_param:keystone_panko_username}
+        password: ${_param:keystone_panko_password}
         host: ${_param:openstack_control_address}
         protocol: ${_param:cluster_internal_protocol}
       database:
+        user: ${_param:mysql_panko_username}
+        password: ${_param:mysql_panko_password}
         host: ${_param:openstack_database_address}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
diff --git a/panko/server/single.yml b/panko/server/single.yml
index ea8f4a1..a10562a 100644
--- a/panko/server/single.yml
+++ b/panko/server/single.yml
@@ -16,8 +16,12 @@
   panko:
     server:
       identity:
+        user: ${_param:keystone_panko_username}
+        password: ${_param:keystone_panko_password}
         protocol: ${_param:internal_protocol}
       database:
+        user: ${_param:mysql_panko_username}
+        password: ${_param:mysql_panko_password}
         x509:
           enabled: ${_param:openstack_mysql_x509_enabled}
           ca_file: ${_param:mysql_panko_ssl_ca_file}
diff --git a/sahara/server/cluster.yml b/sahara/server/cluster.yml
index b01ab3d..3e48e7d 100644
--- a/sahara/server/cluster.yml
+++ b/sahara/server/cluster.yml
@@ -18,7 +18,7 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: sahara
-        user: sahara
+        user: ${_param:mysql_sahara_username}
         password: ${_param:mysql_sahara_password}
       identity:
         engine: keystone
@@ -26,7 +26,7 @@
         host:  ${_param:openstack_control_address}
         port: 35357
         tenant: service
-        user: sahara
+        user: ${_param:keystone_sahara_username}
         password: ${_param:keystone_sahara_password}
       message_queue:
         engine: rabbitmq
diff --git a/sahara/server/single.yml b/sahara/server/single.yml
index fcb26c9..3b63c44 100644
--- a/sahara/server/single.yml
+++ b/sahara/server/single.yml
@@ -14,13 +14,13 @@
         host: ${_param:openstack_database_address}
         port: 3306
         name: sahara
-        user: sahara
+        user: ${_param:mysql_sahara_username}
         password: ${_param:mysql_sahara_password}
       identity:
         engine: keystone
         host: ${_param:openstack_control_address}
         port: 35357
-        user: sahara
+        user: ${_param:keystone_sahara_username}
         password: ${_param:keystone_sahara_password}
         tenant: service
       message_queue: