Description of problem:
There is currently no way to restrict the tenants that have access to an external network in Neutron. So there is currently no workflow to have a special set of floating IPs that only certain tenants can access. In order to support this, access to external networks should be controlled via the RBAC framework that was introduced to limit access to shared networks.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHEA-2016-1597.html