<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1420586343585_11674">Hi, <br></div><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_1_1420586343585_11680" style="display: block;"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1420586343585_11679"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1420586343585_11678"><div class="y_msg_container" id="yui_3_16_0_1_1420586343585_11690"><div id="yiv4954325490"><div id="yui_3_16_0_1_1420586343585_11689"><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" id="yui_3_16_0_1_1420586343585_11688"><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr"><br></div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr">I am trying to make a HTTP PUT request to assign admin role to a given user in a given domain: </div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr"><br></div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr"><a rel="nofollow" target="_blank" onclick="return theMainWindow.showLinkWarning(this)" href="http://10.0.1.87:8000/v1/openstack/keystone/v3/domains/16faa0dcebc94ca0ad83807d5c628754/users/bd0bf9040f0a47ce9cd09610f4c7dc17/roles/52580a3e2e164aca9e46b8c013bc7e18" id="yiv4954325490yui_3_16_0_1_1420586343585_6649">http://host:port/keystone/v3/domains/16faa0dcebc94ca0ad83807d5c628754/users/bd0bf9040f0a47ce9cd09610f4c7dc17/roles/52580a3e2e164aca9e46b8c013bc7e18</a> as per the documentation in <a rel="nofollow" target="_blank" href="http://developer.openstack.org/api-ref-identity-v3.html" class="yiv4954325490" style="" id="yiv4954325490yui_3_16_0_1_1420586343585_7384">http://developer.openstack.org/api-ref-identity-v3.html</a> but <b id="yiv4954325490yui_3_16_0_1_1420586343585_7379">I get a HTTP 403 error</b>. I am quite sure the domain, user and role IDs are valid. Any idea what I might be doing wrong? Do I have to set any special flags in keystone for this to succeed?<br></div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr"><br></div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr">Regards,</div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr">-Deep.</div><div id="yiv4954325490yui_3_16_0_1_1420586343585_6605" dir="ltr" class="yiv4954325490" style=""><br class="yiv4954325490" style=""></div></div></div></div><br><br></div> </div> </div> </div> </div></body></html>