I currently don't have an OpenStack installation for testing this, but I am surprised that project list works for an unprivileged user.

To see the user ID, try openstack user show USERNAME.

If nothing helps, and if you have access to a controller, you can still tweak the policy

Sometime tenant need to see details about own project to get VIM access, Its absolutely fine. You can able to see project "foo" because foo is tenant which you are using. It wont give you update access, only read access openstack project list gives output for only current project not all project unless you are admin.

openstack user list >> only admin given privileged

[root@PIYUSH]# source tenant.rc [root@PIYUSH]# openstack project list +----------------------------------+---------+ | ID | Name | +----------------------------------+---------+ | 3da8bd0f24ed48bbbfd081d8b3fbc0a7 | tenant | +----------------------------------+---------+

[root@PIYUSH]# source admin.rc > with admin you able to see tenant [root@PIYUSH# openstack project list +----------------------------------+------------------------------------------------------------------+ | ID | Name | +----------------------------------+------------------------------------------------------------------+ | 172f112aa8174e23acdb4ec9cb96e36b | 90dd7a084fb84cf4b8a8a0edf9e4220a-fe3e7a39-6909-4920-baf2-d236396 | | 27e48659b34e4ccc8835bedf3654ce9c | 3da8bd0f24ed48bbbfd081d8b3fbc0a7-a8651281-22b3-41ce-add0-2539fc8 | | 3da8bd0f24ed48bbbfd081d8b3fbc0a7 | tenant | | 4ed6c4cfbfda403cb9acd28284d96f57 | e68c458a95764aeca8ea6a598956e630-34f8946b-17d6-4329-acfe-6d29d85 | | 4fea63e6b255486da5456b0683341a9a | e68c458a95764aeca8ea6a598956e630-c1bed337-f25b-475f-bfff-048ab8c | | 532e5d7157244a3ab5f206a97e6c6643 | 90dd7a084fb84cf4b8a8a0edf9e4220a-0ff3ae1d-77c0-4aa5-9301-f44376e | | +----------------------------------+------------------------------------------------------------------+