# openstack user show fcee386fa4004f4e91360c41b805cd54
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | 2c9af31b9bd049c6b03419fbfe901663 |
| enabled             | True                             |
| id                  | fcee386fa4004f4e91360c41b805cd54 |
| name                | user1                            |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

# openstack domain show 2c9af31b9bd049c6b03419fbfe901663
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| enabled     | True                             |
| id          | 2c9af31b9bd049c6b03419fbfe901663 |
| name        | domain1                          |
+-------------+----------------------------------+

# openstack role show 0a18f45a28e84bc8966aded975f66119
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | None                             |
| id        | 0a18f45a28e84bc8966aded975f66119 |
| name      | role1                            |
+-----------+----------------------------------+

# openstack role assignment list --domain 2c9af31b9bd049c6b03419fbfe901663
+----------------------------------+----------------------------------+-------+---------+----------------------------------+-----------+
| Role                             | User                             | Group | Project | Domain                           | Inherited |
+----------------------------------+----------------------------------+-------+---------+----------------------------------+-----------+
| 0a18f45a28e84bc8966aded975f66119 | fcee386fa4004f4e91360c41b805cd54 |       |         | 2c9af31b9bd049c6b03419fbfe901663 | False     |
+----------------------------------+----------------------------------+-------+---------+----------------------------------+-----------+


now as the user1 user:
# openstack user list --domain 2c9af31b9bd049c6b03419fbfe901663
You are not authorized to perform the requested action: identity:list_users. (HTTP 403) (Request-ID: req-2b1e8f90-b8c1-48a7-aab2-19b12ef41d95)