Revision history [back]

All these linked guides miss one vital step. You have to give your admin user the admin role in the default domain.

openstack role add --domain default --user admin admin

These are the only options needed in Horizon's local_settings.py

OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "member"
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"

No changes to any policy files are necessary.