Description of problem: If I apply group permissions using the PowerUserRole to the cluster itself, then any VMs created in the user portal by users in that group don’t get the UserVmManager role applied correctly. The user, authorization provider and namespace fields are all blank meaning that the VM is visible to all users on the platform.

If you do this with individual users’ permissions though, it works as 
expected and they get the UserVmManager role assigned to their 
username on the VM.




Version-Release number of selected component (if applicable):


How reproducible:All the time


Steps to Reproduce:
1. Associate platform with Active Directory
2. Apply AD group permissions to cluster with PowerUserRole
3. Get a member of that group to create a VM
4. Check permissions on VM in admin portal
5. Login as a user that's not in that group and you can see the new VM.

Actual results:VM created by user in 1 group is visible to all groups.


Expected results:Only the users in that group should be able to see the VM in the portal


Additional info: