Solved: This was the wrong approach, trying to modify roles.

Goal: I have 4 units with each 3 teams in it. Each team must be able to create instances, and each team must also be able to create instances on a _shared_ net for the respective unit. BUT unit 1 should _not_ see any instance of unit 2 and so on...

The problem: How can I create shared networks within a single unit:

Solution: The use of RBAC: Check the official openstack documentation of release mitaka => Networking-Guide => Config RBAC (http://docs.openstack.org/mitaka/networking-guide/config-rbac.html (http://docs.openstack.org/mitaka/netw...))

With that, it is easy to create a network we like to share with other tenants.