Comment 10 for bug 1579612

Reviewed: https://review.openstack.org/331343
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-plugins/commit/?id=eba2d7fe08c624904bdd9d272353d3d730fd0156
Submitter: Jenkins
Branch: stable/mitaka

commit eba2d7fe08c624904bdd9d272353d3d730fd0156
Author: Jimmy McCrory <email address hidden>
Date: Tue May 10 13:26:25 2016 -0700

    Support users without projects in keystone library

    Update the ensure_user, ensure_user_role, and ensure_group_role commands
    and dependent functions to allow creation of and role assignment to a
    user without specifying a project.
    This will allow use of the keystone library for creating users, such as
    the heat stack admin, within only a domain.

    Since a role can only get granted to either a project or domain at one
    time, only attempt to grant the role within the project if both are
    provided.

    Notifications of state changes for the ensure role commands have also
    been fixed.

    Partial-Bug: 1579612
    Change-Id: I6a132e5407c9881a047037b85bd6e25b85c0d8a1
    (cherry picked from commit 07d600dcff3aa699a32c5f7b049e54016d53919a)