In general, it is desirable to have different scopes of admins. A cloud admin is needed to create and manage domains. A domain admin is needed to create and manage users and projects for a domain. A project admin is required to manage the resources created by members of a project.
The solution is likely to be a combination of changes to the policy file and establishing conventions for the "home" domain and project for different scopes of admin.
In general, it is desirable to have different scopes of admins. A cloud admin is needed to create and manage domains. A domain admin is needed to create and manage users and projects for a domain. A project admin is required to manage the resources created by members of a project.
The solution is likely to be a combination of changes to the policy file and establishing conventions for the "home" domain and project for different scopes of admin.