Configuring roles in Keystone
Roles are the permissions given to users within a project. Roles can also be scoped to a particular domain, making it possible to restrict permissions for particular users to a domain and project. If you used Ansible to install your OpenStack environment, it should already contain some default roles, such as admin
and _member_
. Here we will configure one role, a cloud_admin
role that allows for administration of our example bookstore
domain environment and a user
role for the default
domain that is given to ordinary users who will be using the cloud environment.
Getting ready
Ensure that you are logged on to a correctly configured OpenStack client and can access the OpenStack environment as a user with admin privileges. ...
Get OpenStack Cloud Computing Cookbook - Fourth Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.