Dear Openstack, We have deployed openstack train branch. This mail is in regards to the default role in openstack. we are trying to create a read-only user i.e, the said user can only view in the web portal(horizon)/using cli commands. the user cannot create an instance or delete an instance , the same with any resource. we created a user in a project test with reader role, but in horizon/cli able to create and delete instance and similar to other access also if you so kindly help us fix this issue would be grateful. the commands used for creation $ openstack user create --domain default --password-prompt mailto:test-reader@test.com $ openstack role add --project test --user mailto:gowtham.sankar@zohocorp.com reader Thanks and Regards sysadmin