---
features:
  - |
    The ``system_scope`` parameter has been added to
    the ``heat::keystone::authtoken`` class.

  - |
    The ``heat::keystone::auth`` class now supports customizing roles assigned
    to the heat service user.

  - |
    The ``heat::keystone::auth_cfn`` class now supports customizing roles
    assigned to the heat service user.

  - |
    The ``heat::keystone::auth`` class now supports defining assignmet of
    system-scoped roles to the heat service user.

  - |
    The ``heat::keystone::auth_cfn`` class now supports defining assignmet of
    system-scoped roles to the heat service user.