To correct my comment in #2 it's because Horizon used to have its own 'Member' role but we switched the default to '_member_' instead, to avoid confusing users over having 2 "member" definitions and be in sync with Keystone (bug 1264228).
To correct my comment in #2 it's because Horizon used to have its own 'Member' role but we switched the default to '_member_' instead, to avoid confusing users over having 2 "member" definitions and be in sync with Keystone (bug 1264228).