Comment 1 for bug 1058750

From dolph:

By default, I believe it shows you your own roles. With a token/endpoint specified (bypassing auth), it should work if you specify a user & tenant:

$ keystone help user-role-list
usage: keystone user-role-list [--user-id <user-id>] [--tenant-id <tenant-id>]

List roles granted to a user

Optional arguments:
  --user-id <user-id> List roles granted to a user
  --tenant-id <tenant-id>
                        List roles granted on a tenant