python-openstackclient/doc/source/command-objects/role.rst

role

Identity v2, v3

role add

Add role to a user or group in a project or domain

role add

os role add
    --domain <domain> | --project <project> [--project-domain <project-domain>]
    --user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
    <role>

--domain <domain>

Include <domain> (name or ID)

3

--project <project>

Include <project> (name or ID)

--user <user>

Include <user> (name or ID)

--group <group>

Include <group> (name or ID)

3

--user-domain <user-domain>

Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.

3

--group-domain <group-domain>

Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.

3

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

3

<role>

Role to add to `<project>:<user>` (name or ID)

role create

Create new role

role create

os role create
    [--or-show]
    <name>

--or-show

Return existing role

If the role already exist return the existing role data and do not fail.

<name>

New role name

role delete

Delete role(s)

role delete

os role delete
    <role> [<role> ...]

<role>

Role to delete (name or ID)

role list

List roles

role list

os role list
    --domain <domain> | --project <project> [--project-domain <project-domain>]
    --user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]

--domain <domain>

Filter roles by <domain> (name or ID)

3

--project <project>

Filter roles by <project> (name or ID)

3

--user <user>

Filter roles by <user> (name or ID)

3

--group <group>

Filter roles by <group> (name or ID)

3

--user-domain <user-domain>

Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.

3

--group-domain <group-domain>

Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.

3

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

3

role remove

Remove role from domain/project : user/group

role remove

os role remove
    --domain <domain> | --project <project> [--project-domain <project-domain>]
    --user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
    <role>

--domain <domain>

Include <domain> (name or ID)

3

--project <project>

Include <project> (name or ID)

--user <user>

Include <user> (name or ID)

--group <group>

Include <group> (name or ID)

3

--user-domain <user-domain>

Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.

3

--group-domain <group-domain>

Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.

3

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

3

<role>

Role to remove (name or ID)

role set

Set role properties

3

role set

os role set
    [--name <name>]
    <role>

--name <name>

Set role name

<role>

Role to modify (name or ID)

role show

Display role details

role show

os role show
    <role>

<role>

Role to display (name or ID)