Comment 2 for bug 1365332

Btw, as you've noted, this is really a consequence of this long-standing keystone bug:

https://bugs.launchpad.net/keystone/+bug/968696

It *should* be possible to create a user who has admin rights over just one domain, but atm in keystone it's not :(