On Tue, Jan 28, 2014 at 7:35 PM, Vishvananda Ishaya <vishvananda at gmail.com>wrote: > The key use case here is to delegate administration rights for a group of > tenants to a specific user/role. There is something in Keystone called a > "domain" which supports part of this functionality, but without support > from all of the projects, this concept is pretty useless. FYI: swift and keystoneauth allow to have cross project ACLs Chmouel. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140128/e947ded1/attachment.html>