Hi, I am trying to make a HTTP PUT request to assign admin role to a given user in a given domain: http://host:port/keystone/v3/domains/16faa0dcebc94ca0ad83807d5c628754/users/bd0bf9040f0a47ce9cd09610f4c7dc17/roles/52580a3e2e164aca9e46b8c013bc7e18 as per the documentation in http://developer.openstack.org/api-ref-identity-v3.html but I get a HTTP 403 error. I am quite sure the domain, user and role IDs are valid. Any idea what I might be doing wrong? Do I have to set any special flags in keystone for this to succeed? Regards,-Deep. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-security/attachments/20150106/79534542/attachment.html>