We can't add constraints to admin role without consider
regressions. It happens that two tempest scenarios are now failling:
tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_network_basic_ops
tempest.scenario.test_server_multinode.TestServerMultinode.test_schedule_to_all_nodes
If admin wants to give role (even Admin role) to an user for a tenant,
the right way is to use keystone trust API.
Change-Id: I161ea7d1aec5e5784455b5bce4605b2f9143daa2
Related-Bug: #1830536
Signed-off-by: Sahid Orentino Ferdjaoui <sahid.ferdjaoui@canonical.com>
(cherry picked from commit 2ad425b1cd)
f33b6789ac