[ovirt-users] user permissions

Hi, In our 3.4.3 environment I started adding external users (it is connected to a freeipa server) and I'm having some problems setting the correct permissions. When I give all user roles to a user, I cannot create a vm and get an error "User is not authorized to perform this action". I tried setting it on the system level, DC level and cluster level. I needed to give this user an administrator role with only exactly the same vm and disk permissions (nothing extra) and things work ok, but he can now login to the admin portal. So I blocked it with a .htaccess which is not the prettiest solution. Am I doing things wrong? Also the user disappeared from the "System permissions" overview but can still login, which is a bit weird. Kind regards, Jorick Astrego Netbulae