585974e4c7
Change-Id: Ifd2bb6badc778368ca641cd0889dd2ed19b8cc41 Signed-off-by: Doug Hellmann <doug@doughellmann.com>
60 lines
2.0 KiB
ReStructuredText
60 lines
2.0 KiB
ReStructuredText
=======================
|
|
Create and manage roles
|
|
=======================
|
|
|
|
A role is a personality that a user assumes to perform a specific set
|
|
of operations. A role includes a set of rights and privileges. A user
|
|
assumes that role inherits those rights and privileges.
|
|
|
|
.. note::
|
|
|
|
OpenStack Identity service defines a user's role on a
|
|
project, but it is completely up to the individual service
|
|
to define what that role means. This is referred to as the
|
|
service's policy. To get details about what the privileges
|
|
for each role are, refer to the ``policy.json`` file
|
|
available for each service in the
|
|
``/etc/SERVICE/policy.json`` file. For example, the
|
|
policy defined for OpenStack Identity service is defined
|
|
in the ``/etc/keystone/policy.json`` file.
|
|
|
|
Create a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and select the :guilabel:`admin` project from the
|
|
drop-down list.
|
|
#. On the :guilabel:`Identity` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Create Role` button.
|
|
|
|
In the :guilabel:`Create Role` window, enter a name for the role.
|
|
#. Click the :guilabel:`Create Role` button to confirm your changes.
|
|
|
|
Edit a role
|
|
~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and select the :guilabel:`Identity` project from the
|
|
drop-down list.
|
|
#. On the :guilabel:`Identity` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Edit` button.
|
|
|
|
In the :guilabel:`Update Role` window, enter a new name for the role.
|
|
#. Click the :guilabel:`Update Role` button to confirm your changes.
|
|
|
|
.. note::
|
|
|
|
Using the dashboard, you can edit only the name assigned to
|
|
a role.
|
|
|
|
Delete a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and select the :guilabel:`Identity` project from the
|
|
drop-down list.
|
|
#. On the :guilabel:`Identity` tab, click the :guilabel:`Roles` category.
|
|
#. Select the role you want to delete and click the :guilabel:`Delete
|
|
Roles` button.
|
|
#. In the :guilabel:`Confirm Delete Roles` window, click :guilabel:`Delete
|
|
Roles` to confirm the deletion.
|
|
|
|
You cannot undo this action.
|