Comment 1 for bug 1413426

We're experiencing this as well.

More interestingly, horizon code seems to be doing a policy check for "compute:get_all_tenants", however (our) Nova's policy rejection is on "os_compute_api:servers:detail:get_all_tenants".

That seems like local copy of nova policy file would allow it, but then the nova client hitting nova API policy would reject it.