This is working fine for me with Juno:
[root@rdo ~(keystone_admin)]# keystone user-role-add --user test --role _member_ --tenant demo [root@rdo ~(keystone_admin)]# keystone user-list --tenant demo +------+------+---------+------------------+ | id | name | enabled | email | +------+------+---------+------------------+ | demo | demo | True | <email address hidden> | | test | test | True | <email address hidden> | +------+------+---------+------------------+ [root@rdo ~(keystone_admin)]# ipa user-disable test ---------------------------- Disabled user account "test" ---------------------------- [root@rdo ~(keystone_admin)]# keystone user-list --tenant demo +------+------+---------+------------------+ | id | name | enabled | email | +------+------+---------+------------------+ | demo | demo | True | <email address hidden> | | test | test | False | <email address hidden> | +------+------+---------+------------------+
This is working fine for me with Juno:
[root@rdo ~(keystone_admin)]# keystone user-role-add --user test --role _member_ --tenant demo +------ +------ ---+--- ------- ------- -+ +------ +------ ---+--- ------- ------- -+ +------ +------ ---+--- ------- ------- -+ ------- ------- ------- ------- ------- ------- +------ +------ ---+--- ------- ------- -+ +------ +------ ---+--- ------- ------- -+ +------ +------ ---+--- ------- ------- -+
[root@rdo ~(keystone_admin)]# keystone user-list --tenant demo
+------
| id | name | enabled | email |
+------
| demo | demo | True | <email address hidden> |
| test | test | True | <email address hidden> |
+------
[root@rdo ~(keystone_admin)]# ipa user-disable test
-------
Disabled user account "test"
-------
[root@rdo ~(keystone_admin)]# keystone user-list --tenant demo
+------
| id | name | enabled | email |
+------
| demo | demo | True | <email address hidden> |
| test | test | False | <email address hidden> |
+------