Contrail version is 3.2.9 aio50 not enabled RBAC yet. But another aio71 with RBAC enabled also see this same issue. root@aio50:/opt/contrail/utils# python rbacutil.py --name default-domain --server 127.0.0.1:9100 AAA mode is cloud-admin Oper = None Name = ['default-domain'] UUID = None API Server = 127.0.0.1:9100 root@aio50:/opt/contrail/utils# python chmod2.py --uuid 33e3fe1b-1d71-4a09-9ab4-79df9d96a74c --server 127.0.0.1:9100 API Server = 127.0.0.1:9100 Keystone credentials admin/Juniper/admin Type = floating-ip-pool Name = default-domain:Tenant-A:VN-A:Floating-VA-A Cur perms a7d39c3b7cb14e0c94bf5f2c572788fd/7 7 [u'df6331e4-9bcb-450c-b1d5-03e9c02c0702:7'] root@aio50:/opt/contrail/utils# contrail-version Package Version Build-ID | Repo | Package Name -------------------------------------- ------------------------------ ---------------------------------- contrail-analytics 3.2.9.0-69 69 contrail-config 3.2.9.0-69 69 contrail-config-openstack 3.2.9.0-69 69 contrail-control 3.2.9.0-69 69 contrail-database-common 3.2.9.0-69 69 contrail-dns 3.2.9.0-69 69 contrail-docs 3.2.9.0-69 69 contrail-f5 3.2.9.0-69 69 contrail-fabric-utils 3.2.9.0-69 69 contrail-heat 3.2.9.0-69 69 contrail-install-packages 3.2.9.0-69~kilo 69 contrail-lib 3.2.9.0-69 69 contrail-nodemgr 3.2.9.0-69 69 contrail-nova-networkapi 3.2.9.0-69 69 contrail-nova-vif 3.2.9.0-69 69 contrail-openstack 3.2.9.0-69 69 contrail-openstack-analytics 3.2.9.0-69 69 contrail-openstack-config 3.2.9.0-69 69 contrail-openstack-control 3.2.9.0-69 69 contrail-openstack-dashboard 3.2.9.0-69 69 contrail-openstack-database 3.2.9.0-69 69 contrail-openstack-vrouter 3.2.9.0-69 69 contrail-openstack-webui 3.2.9.0-69 69 contrail-setup 3.2.9.0-69 69 contrail-utils 3.2.9.0-69 69 contrail-vrouter-agent 3.2.9.0-69 69 contrail-vrouter-common 3.2.9.0-69 69 contrail-vrouter-dkms 3.2.9.0-69 69 contrail-vrouter-init 3.2.9.0-69 69 contrail-vrouter-utils 3.2.9.0-69 69 contrail-web-controller 3.2.9.0-69 69 contrail-web-core 3.2.9.0-69 69 ifmap-python-client 0.1-2 69 ifmap-server 0.3.2-1contrail3 69 neutron-plugin-contrail 3.2.9.0-69 69 nova-api 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-common 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-compute 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-compute-kvm 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-compute-libvirt 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-conductor 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-console 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-consoleauth 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-novncproxy 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-objectstore 1:2015.1.2-0ubuntu2~cloud0.1contrail269 nova-scheduler 1:2015.1.2-0ubuntu2~cloud0.1contrail269 python-contrail 3.2.9.0-69 69 python-contrail-vrouter-api 3.2.9.0-69 69 python-neutronclient 1:2.3.11-0ubuntu1~cloud0.3contrail 69 python-nova 1:2015.1.2-0ubuntu2~cloud0.1contrail269 python-opencontrail-vrouter-netns 3.2.9.0-69 69