e77dbe04ac
We do not need these namespaces like xmlns:svg and xmlns:html anywhere, remove the declarations. Change-Id: Ic6aa62c28b2b21092d1e1d5c6f431807519f59af
101 lines
3.6 KiB
XML
101 lines
3.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE section [
|
|
<!-- Some useful entities bortred from HTML -->
|
|
<!ENTITY ndash "–">
|
|
<!ENTITY mdash "—">
|
|
<!ENTITY hellip "…">
|
|
<!ENTITY plusmn "±">
|
|
]>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="section_dashboard_admin_manage_roles">
|
|
<?dbhtml stop-chunking?>
|
|
<title>Create and manage roles</title>
|
|
<para>A role is a personality that a user assumes to perform a specific set
|
|
of operations. A role includes a set of rights and privileges. A user
|
|
assuming that role inherits those rights and privileges.</para>
|
|
<note>
|
|
<para>OpenStack Identity service defines a user's role on a project but it
|
|
is completely up to the individual service to define what that role means.
|
|
This is referred to as the service's policy. To get details about what the
|
|
privileges for each role are, refer to the <filename>policy.json</filename>
|
|
file available for each service in the
|
|
<filename>/etc/<replaceable>SERVICE</replaceable>/policy.json</filename>
|
|
file. For example, the policy defined for OpenStack Identity service is
|
|
defined in the <filename>/etc/keystone/policy.json</filename> file.
|
|
</para>
|
|
</note>
|
|
<section xml:id="create_role">
|
|
<title>Create a role</title>
|
|
<procedure>
|
|
<step>
|
|
<para>Log in to the dashboard and choose the <guilabel>admin</guilabel>
|
|
project from the <guilabel>CURRENT PROJECT</guilabel> drop-down list.
|
|
</para>
|
|
</step>
|
|
<step>
|
|
<para>On the <guilabel>Admin</guilabel> tab, click the <guilabel>Roles
|
|
</guilabel> category.
|
|
</para>
|
|
</step>
|
|
<step>
|
|
<para>Click the <guibutton>Create Role</guibutton> button.</para>
|
|
<para>In the <guilabel>Create Role</guilabel> window, enter a
|
|
name for the role.</para>
|
|
</step>
|
|
<step>
|
|
<para>Click the <guibutton>Create Role</guibutton> button to confirm
|
|
your changes.</para>
|
|
</step>
|
|
</procedure>
|
|
</section>
|
|
<section xml:id="edit_role">
|
|
<title>Edit a role</title>
|
|
<procedure>
|
|
<step>
|
|
<para>Log in to the dashboard and choose the <guilabel>admin</guilabel>
|
|
project from the <guilabel>CURRENT PROJECT</guilabel> drop-down list.
|
|
</para>
|
|
</step>
|
|
<step>
|
|
<para>On the <guilabel>Admin</guilabel> tab, click the <guilabel>Roles
|
|
</guilabel> category.
|
|
</para>
|
|
</step>
|
|
<step>
|
|
<para>Click the <guibutton>Edit</guibutton> button.</para>
|
|
<para>In the <guilabel>Update Role</guilabel> window, enter a new
|
|
name for the role.</para>
|
|
</step>
|
|
<step>
|
|
<para>Click the <guibutton>Update Role</guibutton> button to confirm
|
|
your changes.
|
|
</para>
|
|
</step>
|
|
</procedure>
|
|
<note>
|
|
<para>Using the dashboard, you can edit only the name assigned to a role.</para>
|
|
</note>
|
|
</section>
|
|
<section xml:id="delete_role">
|
|
<title>Delete a role</title>
|
|
<procedure>
|
|
<step>
|
|
<para>Log in to the dashboard and choose the <guilabel>admin</guilabel>
|
|
project from the <guilabel>CURRENT PROJECT</guilabel> drop-down list.
|
|
</para>
|
|
</step>
|
|
<step>
|
|
<para>On the <guilabel>Admin</guilabel> tab, click the <guilabel>Roles
|
|
</guilabel> category.</para>
|
|
</step>
|
|
<step>
|
|
<para>Select the role you want to delete and click the <guibutton>Delete
|
|
Roles</guibutton> button.</para>
|
|
</step>
|
|
</procedure>
|
|
</section>
|
|
</section>
|