++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=48eff18461994ee3a26ec0673e29d7aa + openstack domain show 48eff18461994ee3a26ec0673e29d7aa +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | 48eff18461994ee3a26ec0673e29d7aa | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=48eff18461994ee3a26ec0673e29d7aa --description 'Service User for RegionOne/magnum' --password=w0cVBpDvT2jYTVfUGK96A8PC6r26r5EP magnum-domain-RegionOne + SERVICE_OS_USERID=330ee16f132c44cb9850518ec31d0530 + openstack user set --password=w0cVBpDvT2jYTVfUGK96A8PC6r26r5EP 330ee16f132c44cb9850518ec31d0530 + openstack user show 330ee16f132c44cb9850518ec31d0530 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 48eff18461994ee3a26ec0673e29d7aa | | email | None | | enabled | True | | id | 330ee16f132c44cb9850518ec31d0530 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=137339a83f6a44f38df768af8b11bc5a + openstack role add --domain=48eff18461994ee3a26ec0673e29d7aa --user=330ee16f132c44cb9850518ec31d0530 --user-domain=48eff18461994ee3a26ec0673e29d7aa 137339a83f6a44f38df768af8b11bc5a + openstack role assignment list --role=137339a83f6a44f38df768af8b11bc5a --user-domain=48eff18461994ee3a26ec0673e29d7aa --user=330ee16f132c44cb9850518ec31d0530 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 137339a83f6a44f38df768af8b11bc5a | 330ee16f132c44cb9850518ec31d0530 | | | 48eff18461994ee3a26ec0673e29d7aa | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+