diff --git a/manifests/rgw/keystone.pp b/manifests/rgw/keystone.pp
index a93e5f9d..e91c7e54 100644
--- a/manifests/rgw/keystone.pp
+++ b/manifests/rgw/keystone.pp
@@ -45,7 +45,7 @@
 # [*rgw_keystone_accepted_roles*]
 #   (Optional) Roles to accept from keystone.
 #   Comma separated list of roles.
-#   Defaults to 'Member'
+#   Defaults to 'member'
 #
 # [*rgw_keystone_token_cache_size*]
 #   (Optional) How many tokens to keep cached.
@@ -92,7 +92,7 @@ define ceph::rgw::keystone (
   $rgw_keystone_admin_user,
   $rgw_keystone_admin_password,
   $rgw_keystone_url                 = 'http://127.0.0.1:5000',
-  $rgw_keystone_accepted_roles      = 'Member',
+  $rgw_keystone_accepted_roles      = 'member',
   $rgw_keystone_token_cache_size    = 500,
   $rgw_s3_auth_use_keystone         = true,
   $rgw_keystone_implicit_tenants    = true,
diff --git a/releasenotes/notes/keystone-rgw-default-role-01c22244b6340a32.yaml b/releasenotes/notes/keystone-rgw-default-role-01c22244b6340a32.yaml
new file mode 100644
index 00000000..73a07ed5
--- /dev/null
+++ b/releasenotes/notes/keystone-rgw-default-role-01c22244b6340a32.yaml
@@ -0,0 +1,5 @@
+---
+upgrade:
+  - |
+    The default value for ceph::rgw::keystone::rgw_keystone_accepted_roles is
+    changed from Member to member
diff --git a/spec/defines/ceph_rgw_keystone_spec.rb b/spec/defines/ceph_rgw_keystone_spec.rb
index a8291a91..3252b9ab 100644
--- a/spec/defines/ceph_rgw_keystone_spec.rb
+++ b/spec/defines/ceph_rgw_keystone_spec.rb
@@ -49,7 +49,7 @@ describe 'ceph::rgw::keystone' do
       it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_admin_password').with_value('123456') }
       it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_admin_token').with_ensure('absent') }
       it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_url').with_value('http://127.0.0.1:5000') }
-      it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_accepted_roles').with_value('Member') }
+      it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_accepted_roles').with_value('member') }
       it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_token_cache_size').with_value(500) }
       it { should contain_ceph_config('client.radosgw.gateway/rgw_s3_auth_use_keystone').with_value(true) }
       it { should contain_ceph_config('client.radosgw.gateway/rgw_keystone_implicit_tenants').with_value(true) }