d14316a832
There are optional domain scope arguments --user-domain, --group-domain and --project-domain to filter user, group and project for command 'os role add', however, the doc is missing them. Closes-Bug: #1460296 Change-Id: Ie7c7707d183da042c51e98b6cd4003c89efc4032
3.2 KiB
role
Identity v2, v3
role add
Add role to a user or group in a project or domain
role add
os role add
--domain <domain> | --project <project> [--project-domain <project-domain>]
--user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
<role>--domain <domain>
Include <domain> (name or ID)
3
--project <project>
Include <project> (name or ID)
--user <user>
Include <user> (name or ID)
--group <group>
Include <group> (name or ID)
3
--user-domain <user-domain>
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
3
--group-domain <group-domain>
Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.
3
--project-domain <project-domain>
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
3
<role>
Role to add to `<project>:<user>` (name or ID)
role create
Create new role
role create
os role create
<name><name>
New role name
role delete
Delete role(s)
role delete
os role delete
<role> [<role> ...]<role>
Role to delete (name or ID)
role list
List roles
role list
os role list
[--domain <domain> | --project <project]
[--user <user> | --group <group>]--domain <domain>
Filter roles by <domain> (name or ID)
3
--project <project>
Filter roles by <project> (name or ID)
3
--user <user>
Filter roles by <user> (name or ID)
3
--group <group>
Filter roles by <group> (name or ID)
3
role remove
Remove role from domain/project : user/group
role remove
os role remove
[--domain <domain> | --project <project]
[--user <user> | --group <group>]
<role>--domain <domain>
Include <domain> (name or ID)
3
--project <project>
Include <project> (name or ID)
--user <user>
Include <user> (name or ID)
--group <group>
Include <group> (name or ID)
3
<role>
Role to remove (name or ID)
role set
Set role properties
3
role set
os role set
[--name <name>]
<role>--name <name>
Set role name
<role>
Role to modify (name or ID)
role show
Display role details
role show
os role show
<role><role>
Role to display (name or ID)