Open Stack

Hi,

I have a question related to domains and projects. Looking at the Identity API I see you can create a grant for a Role on a Project , or create a grant for a Role on a Domain, but not create a grant for a Role on a Project and Domain. So I am wondering the following:

1. Can roles on projects be constrained to a particular domain?
2. Are projects domain specific?

Many thanks,

Kristy