I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html (http://docs.openstack.org/admin-guide...)). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: ... )

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-...  - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

EDIT: It seems "Policy" doesn't allow me to do anything:

# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)

EDIT-2: The issue was with the environment. I had sourced the keystonerc_demo file. Once I sourced the keystonerc_admin file I was able to execute all of the commands.