what is the difference between 'Domain', 'Group', 'Tenant' and 'Project'?
In Grizzly~2, I found that in file 'keystone/identity/core.py', there are CRUD operations for 'Domain', 'Group', 'Tenant' and 'Project'.
What I want to known is that what's the difference between them?