Comment 2 for bug 1933271

I believe this is a duplicate of https://bugs.launchpad.net/keystone/+bug/968696 which has been worked on over many years now across most openstack projects.

The "fix" for this is to define more specific roles rather than giving people the "admin" role or assigning them to the "admin project". At least until the efforts with 968696 are completed.