Description of problem: for instance: [oVirt shell (connected)]# list permits grouprole role show-all userrole grouprole and userrole should require two base identifyers (as they're 3-rd level resources): --group-identifier /--role-identifier and --user-identifier /--role-identifier instead these resources considered as 2-nd level resource and auto-competition suggest single option: --grouprole-identifier / --userrole-identifier this is happens due to support of 3+ period based URLs in sdk that was recently added.
closing ON_QA bugs as oVirt 3.1 was released: http://www.ovirt.org/get-ovirt/