Comment 7 for bug 1732502

For context, the policy.v3cloudsample.json file [0] was introduced as a way to get around some of the issues we have with admin-ness (see bug 968696). Until we actually fix some of those admin-ness issues with system-scope and deprecate the policies in code, we'll likely have a differences between what is in policy.v3cloudsample.json and what is in code.

[0] https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json