openstack/python-openstackclient
Code Issues Proposed changes
3a7bb859a6
python-openstackclient/doc/source/command-objects/network-rbac.rst
Huanxuan Ao 57d5f94540 Allow input the QoS policy name in network rbac create command 
We could input a QoS policy ID for the "rbac_object"
parameter in "network rbac create" command but not
name before. After this change, "rbac_object" parameter
can be both QoS policy name or ID.

Change-Id: I0fd6b5b5ae410074d85475ef49e5a0a9a52bf86f
2016-10-20 12:37:40 +08:00

2.8 KiB
Raw Blame History

network rbac

A network rbac is a Role-Based Access Control (RBAC) policy for network resources. It enables both operators and users to grant access to network resources for specific projects.

Network v2

network rbac create

Create network RBAC policy

network rbac create

os network rbac create
    --type <type>
    --action <action>
    --target-project <target-project> [--target-project-domain <target-project-domain>]
    [--project <project> [--project-domain <project-domain>]]
    <rbac-policy>

--type <type>

Type of the object that RBAC policy affects ("qos_policy" or "network") (required)

--action <action>

Action for the RBAC policy ("access_as_external" or "access_as_shared") (required)

--target-project <target-project>

The project to which the RBAC policy will be enforced (name or ID) (required)

--target-project-domain <target-project-domain>

Domain the target project belongs to (name or ID). This can be used in case collisions between project names exist.

--project <project>

The owner project (name or ID)

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

The object to which this RBAC policy affects (name or ID)

network rbac delete

Delete network RBAC policy(s)

network rbac delete

os network rbac delete
    <rbac-policy> [<rbac-policy> ...]




RBAC policy(s) to delete (ID only)

network rbac list

List network RBAC policies

network rbac list

os network rbac list

network rbac set

Set network RBAC policy properties

network rbac set

os network rbac set
    [--target-project <target-project> [--target-project-domain <target-project-domain>]]
    <rbac-policy>

--target-project <target-project>

The project to which the RBAC policy will be enforced (name or ID)

--target-project-domain <target-project-domain>

Domain the target project belongs to (name or ID). This can be used in case collisions between project names exist.

RBAC policy to be modified (ID only)

network rbac show

Display network RBAC policy details

network rbac show

os network rbac show
    <rbac-policy>




RBAC policy (ID only)