Files
docs/doc/source/security/kubernetes/manage-keystone-accounts.rest
Suzana Fernandes 0bf77eef8e Update User Management Section in the SECURITY guide
Change-Id: I753b0cd3912d2f9bc53c50906c05e90f2443d3f0
Signed-off-by: Suzana Fernandes <Suzana.Fernandes@windriver.com>
2025-10-15 17:30:18 +00:00

45 lines
1.4 KiB
ReStructuredText

.. ikv1595849619976
.. _manage-keystone-accounts:
------------------------
Manage Keystone Accounts
------------------------
You can create and manage Keystone users from the web management
interface, the CLI, or the |prod|'s Keystone REST API.
Creation of user with specific role
-----------------------------------
Use the following commands to add a new user named ``daveuser`` with password
"Passw0rd*" and role ``reader``:
.. code-block:: none
~(keystone_admin)]$ openstack user create daveuser --project admin --password Passw0rd*
.. code-block:: none
~(keystone_admin)]$ openstack role add --project admin --user readeruser reader
See:
`https://docs.openstack.org/keystone/pike/admin/cli-manage-projects-users-and-roles.html
<https://docs.openstack.org/keystone/pike/admin/cli-manage-projects-users-and-roles.html>`_
for details on managing Keystone users and roles.
:ref:`keystone-passwd-recovery-ef3b3ce867b7` for details on how to change or
reset a Keystone user password.
:ref:`System Account Password Rules <starlingx-system-accounts-system-account-password-rules>`
for details on password rules, as all keystone accounts are subject to system
password rules.
:ref:`Change the Admin Password on Distributed Cloud <changing-the-admin-password-on-distributed-cloud>`
for details on changing the keystone admin user password across the entire
|prod-dc| system.
.. only:: partner
.. include:: /_includes/dm-credentials-on-keystone-pwds.rest