Common practice seems to be to have a 'service' project to which service accounts are assigned and have roles for Openstack components. Among these would be Neutron and potentially glance.
# openstack project create --description "Service Project" service
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T53494 Use Beta cluster as a true canary for code deployments (epic) | |||
| Open | None | T87220 Minimize infrastructure differences between Beta Cluster and production | |||
| Open | None | T196662 Set up LVS in beta like prod | |||
| Resolved | bd808 | T166396 Program 1 Outcome 4: VPS hosting | |||
| Resolved | None | T167293 Nova-network to Neutron migration | |||
| Declined | None | T167294 use a service role project for openstack components |