It's not a keystone configuration issue, openstack-keystone-10.0.0 in Newton by default uses those restictions - https://github.com/openstack/keystone/blob/339e7cc798aed24b7697980eb7cf8e20498d436d/etc/policy.json#L26
It's not a keystone configuration issue, openstack- keystone- 10.0.0 in Newton by default uses those restictions - https:/ /github. com/openstack/ keystone/ blob/339e7cc798 aed24b7697980eb 7cf8e20498d436d /etc/policy. json#L26