diff --git a/defaults/main.yml b/defaults/main.yml
index 41ec428..7c33e3f 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -68,6 +68,8 @@ sahara_rabbitmq_telemetry_servers: "{{ sahara_rabbitmq_servers }}"
 sahara_rabbitmq_telemetry_use_ssl: "{{ sahara_rabbitmq_use_ssl }}"
 
 ## Database info
+sahara_db_setup_host: "{{ ('galera_all' in groups) | ternary(groups['galera_all'][0], 'localhost') }}"
+sahara_galera_address: "{{ galera_address | default('127.0.0.1') }}"
 sahara_galera_database: sahara
 sahara_galera_user: sahara
 sahara_galera_use_ssl: "{{ galera_use_ssl | default(False) }}"
diff --git a/examples/playbook.yml b/examples/playbook.yml
index a23a85f..58059b9 100644
--- a/examples/playbook.yml
+++ b/examples/playbook.yml
@@ -10,3 +10,7 @@
     sahara_container_mysql_password: "SuperSecretePassword1"
     sahara_service_password: "SuperSecretePassword2"
     sahara_rabbitmq_password: "SuperSecretePassword3"
+    galera_root_user: root
+  vars_prompt:
+    - name: "galera_root_password"
+      prompt: "What is galera_root_password?"
diff --git a/tasks/sahara_db_setup.yml b/tasks/sahara_db_setup.yml
index 7be2c3e..f62cbd6 100644
--- a/tasks/sahara_db_setup.yml
+++ b/tasks/sahara_db_setup.yml
@@ -11,6 +11,32 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+- name: Create DB for service
+  mysql_db:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ sahara_galera_address }}"
+    name: "{{ sahara_galera_database }}"
+    state: "present"
+  delegate_to: "{{ sahara_db_setup_host }}"
+  no_log: True
+
+- name: Grant access to the DB for the service
+  mysql_user:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ sahara_galera_address }}"
+    name: "{{ sahara_galera_user }}"
+    password: "{{ sahara_container_mysql_password }}"
+    host: "{{ item }}"
+    state: "present"
+    priv: "{{ sahara_galera_database }}.*:ALL"
+  delegate_to: "{{ sahara_db_setup_host }}"
+  with_items:
+    - "localhost"
+    - "%"
+  no_log: True
+
 - name: Perform a Sahara DB sync
   command: "{{ sahara_bin }}/sahara-db-manage
               --config-file {{ sahara_db_config }} upgrade head"