52 lines
2.0 KiB
ReStructuredText
52 lines
2.0 KiB
ReStructuredText
=======================
|
|
Create and manage roles
|
|
=======================
|
|
|
|
A role is a personality that a user assumes to perform a specific set
|
|
of operations. A role includes a set of rights and privileges. A user
|
|
assumes that role inherits those rights and privileges.
|
|
|
|
.. note:: OpenStack Identity service defines a user's role on a
|
|
project, but it is completely up to the individual service
|
|
to define what that role means. This is referred to as the
|
|
service's policy. To get details about what the privileges
|
|
for each role are, refer to the :file:`policy.json` file
|
|
available for each service in the
|
|
:file:`/etc/SERVICE/policy.json` file. For example, the
|
|
policy defined for OpenStack Identity service is defined
|
|
in the :file:`/etc/keystone/policy.json` file.
|
|
|
|
Create a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Create Role` button.
|
|
|
|
In the :guilabel:`Create Role` window, enter a name for the role.
|
|
#. Click the :guilabel:`Create Role` button to confirm your changes.
|
|
|
|
Edit a role
|
|
~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Click the :guilabel:`Edit` button.
|
|
|
|
In the :guilabel:`Update Role` window, enter a new name for the role.
|
|
#. Click the :guilabel:`Update Role` button to confirm your changes.
|
|
|
|
.. note:: Using the dashboard, you can edit only the name assigned to
|
|
a role.
|
|
|
|
Delete a role
|
|
~~~~~~~~~~~~~
|
|
|
|
#. Log in to the dashboard and choose the :guilabel:`admin` project from
|
|
the :guilabel:`CURRENT PROJECT` drop-down list.
|
|
#. On the :guilabel:`Admin` tab, click the :guilabel:`Roles` category.
|
|
#. Select the role you want to delete and click the :guilabel:`Delete
|
|
Roles` button.
|