++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=049058f6d729448dbbafaada02c04278 + openstack domain show 049058f6d729448dbbafaada02c04278 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 049058f6d729448dbbafaada02c04278 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=049058f6d729448dbbafaada02c04278 --description 'Service User for RegionOne/magnum' --password=VjwkrCh9jiw16BkvGxw3O4EmvOhqKSgK magnum-domain-RegionOne + SERVICE_OS_USERID=ad541f7b7686403487546a19595bc2bd + openstack user set --password=VjwkrCh9jiw16BkvGxw3O4EmvOhqKSgK ad541f7b7686403487546a19595bc2bd + openstack user show ad541f7b7686403487546a19595bc2bd +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 049058f6d729448dbbafaada02c04278 | | email | None | | enabled | True | | id | ad541f7b7686403487546a19595bc2bd | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=ccdeda5bb575472f87e6ede70c77bb21 + openstack role add --domain=049058f6d729448dbbafaada02c04278 --user=ad541f7b7686403487546a19595bc2bd --user-domain=049058f6d729448dbbafaada02c04278 ccdeda5bb575472f87e6ede70c77bb21 + openstack role assignment list --role=ccdeda5bb575472f87e6ede70c77bb21 --user-domain=049058f6d729448dbbafaada02c04278 --user=ad541f7b7686403487546a19595bc2bd +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | ccdeda5bb575472f87e6ede70c77bb21 | ad541f7b7686403487546a19595bc2bd | | | 049058f6d729448dbbafaada02c04278 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+