3ca96ef93c
If users, projects or groups are provided by name, there is a possibility of the existence other users/projects/groups with the same name in other domain. Even though this is not a problem if the actual ID is given instead of a name; this is mostly a usability enhancement. So, three options were added, one for specifying the domain where the user belongs, another one to specify the project's domain, and finally one to specify the group's domain. Change-Id: Iab04b0e04fa75ea5aa3723b8ea42a45f58a6cdb2 Closes-Bug: #1421328
3.1 KiB
role
Identity v2, v3
role add
Add role to a user or group in a project or domain
role add
os role add
--domain <domain> | --project <project>
--user <user> | --group <group>
<role>--domain <domain>
Include <domain> (name or ID)
3
--project <project>
Include <project> (name or ID)
--user <user>
Include <user> (name or ID)
--group <group>
Include <group> (name or ID)
3
--user-domain <user-domain>
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
3
--group-domain <group-domain>
Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.
3
--project-domain <project-domain>
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
3
<role>
Role to add to `<project>:<user>` (name or ID)
role create
Create new role
role create
os role create
<name><name>
New role name
role delete
Delete role(s)
role delete
os role delete
<role> [<role> ...]<role>
Role to delete (name or ID)
role list
List roles
role list
os role list
[--domain <domain> | --project <project]
[--user <user> | --group <group>]--domain <domain>
Filter roles by <domain> (name or ID)
3
--project <project>
Filter roles by <project> (name or ID)
3
--user <user>
Filter roles by <user> (name or ID)
3
--group <group>
Filter roles by <group> (name or ID)
3
role remove
Remove role from domain/project : user/group
role remove
os role remove
[--domain <domain> | --project <project]
[--user <user> | --group <group>]
<role>--domain <domain>
Include <domain> (name or ID)
3
--project <project>
Include <project> (name or ID)
--user <user>
Include <user> (name or ID)
--group <group>
Include <group> (name or ID)
3
<role>
Role to remove (name or ID)
role set
Set role properties
3
role set
os role set
[--name <name>]
<role>--name <name>
Set role name
<role>
Role to modify (name or ID)
role show
Display role details
role show
os role show
<role><role>
Role to display (name or ID)