<html><head></head><body><div class="ydp69d63c18yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false">Hi again,</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">I should add to this that I have created an admin for the domain but my issue with that is they can see all other networks, instances, etc belonging to other projects.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Regards,</div><div dir="ltr" data-setdir="false">Derek</div><div><br></div>
</div><div id="yahoo_quoted_4717442704" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Friday 18 June 2021, 14:13:13 IST, Derek O keeffe <derekokeeffe85@yahoo.ie> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="yiv0066344926"><div><div class="yiv0066344926yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr">Hi all,</div><div dir="ltr"><br></div><div dir="ltr">I have created a role (project_admin) and have given access to anyone with that role to be allowed delete VM's in their group/project. I am trying to allow that user to now add or remove users in the domain but I can't seem to figure it out. I have edited the /etc/keystone/policy.yaml and added role:project_admin to the create user rule.</div><div dir="ltr"><br></div><div dir="ltr">Is this the way I should be doing it? Or does anyone have any advice? Thanks in advance and happy Friday :)</div><div dir="ltr"><br></div><div dir="ltr">Regards,</div><div dir="ltr">Derek</div></div></div></div></div>
</div>
</div></body></html>