During further investigation, I found that the following commands trigger keystone to automatically create the '_member_' role:
keystone user-create --name admin --tenant admin --pass secrete openstack user create --project admin admin --password secrete
The 'keystone user-create' command in the installation guide lacks the '--tenant' option that appears to trigger this operation.
During further investigation, I found that the following commands trigger keystone to automatically create the '_member_' role:
keystone user-create --name admin --tenant admin --pass secrete
openstack user create --project admin admin --password secrete
The 'keystone user-create' command in the installation guide lacks the '--tenant' option that appears to trigger this operation.