It's not really clear to me why it's openstackclient's fault that a "domain admin" would get a 403 - a "domain admin" is a deployment/policy.json dependent concept in keystone, and it's keystone raising the 403. Can you summarize what openstackclient is doing wrong?
It's not really clear to me why it's openstackclient's fault that a "domain admin" would get a 403 - a "domain admin" is a deployment/ policy. json dependent concept in keystone, and it's keystone raising the 403. Can you summarize what openstackclient is doing wrong?