The past few Forums have really helped shape a way forward for fixing some of the RBAC issues across OpenStack. These issues hinder an entire set of people from using OpenStack without major modifications and custom policies.
During the PTG we settled on an approach that should make it easier for deployers looking to have common personas available out-of-the-box. The current proposal [0] is getting positive feedback from other OpenStack developers and we'd like to take the opportunity to socialize this work with operators and deployers.
[0] https://review.openstack.org/#/c/523973/