d1808ed9c8
Implements: blueprint user-guides-reorganised Change-Id: I147cd09381789a48f361552055e01469746cb398
60 lines
2.1 KiB
ReStructuredText
60 lines
2.1 KiB
ReStructuredText
=======================
|
|
Create and manage roles
|
|
=======================
|
|
|
|
A role is a personality that a user assumes to perform a specific set
|
|
of operations. A role includes a set of rights and privileges. A user
|
|
assumes that role inherits those rights and privileges.
|
|
|
|
.. note::
|
|
|
|
OpenStack Identity service defines a user's role on a
|
|
project, but it is completely up to the individual service
|
|
to define what that role means. This is referred to as the
|
|
service's policy. To get details about what the privileges
|
|
for each role are, refer to the ``policy.json`` file
|
|
available for each service in the
|
|
``/etc/SERVICE/policy.json`` file. For example, the
|
|
policy defined for OpenStack Identity service is defined
|
|
in the ``/etc/keystone/policy.json`` file.
|
|
|
|
Create a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Create Role` button.
|
|
|
|
In the :guilabel:`Create Role` window, enter a name for the role.
|
|
#. Click the :guilabel:`Create Role` button to confirm your changes.
|
|
|
|
Edit a role
|
|
~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Edit` button.
|
|
|
|
In the :guilabel:`Update Role` window, enter a new name for the role.
|
|
#. Click the :guilabel:`Update Role` button to confirm your changes.
|
|
|
|
.. note::
|
|
|
|
Using the dashboard, you can edit only the name assigned to
|
|
a role.
|
|
|
|
Delete a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Select the role you want to delete and click the :guilabel:`Delete
|
|
Roles` button.
|
|
#. In the :guilabel:`Confirm Delete Roles` window, click :guilabel:`Delete
|
|
Roles` to confirm the deletion.
|
|
|
|
You cannot undo this action.
|