Description of problem:

Split from BZ890506.

* per DC directory services - company managing RHEV-M could be personally different from those managing individual VMs. So RHEV-M services provider should be able to give access to specific sysadmins to a DC, but other permissions inside this DC should be managed by the owner (sysadmins) who can delegate additional permissions to their own users/groups in their own directory service.

Simon Grinberg 2012-12-27 09:36:48 EST 
> not sure what the right model is for directory services

I would say tenant as well. The challenge is to understand based on -TBD- to which tenant the user belongs too. 

If I'll take salesforce model, they do not provide a drop down list, but rather user has to login with full UPN, if we enforce the same we can use the domain part of the UPN to select the directory to authenticate against. Mapping to be provided by the admin.