++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=7300b6b694694611a08d8d4d10ff56a9 + openstack domain show 7300b6b694694611a08d8d4d10ff56a9 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 7300b6b694694611a08d8d4d10ff56a9 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=7300b6b694694611a08d8d4d10ff56a9 --description 'Service User for RegionOne/magnum' --password=5rPIgRMVWPebq9KRniMCEC4Fm9mRJLyL magnum-domain-RegionOne + SERVICE_OS_USERID=68314beaaee34463a8463c8408b86bb9 + openstack user set --password=5rPIgRMVWPebq9KRniMCEC4Fm9mRJLyL 68314beaaee34463a8463c8408b86bb9 + openstack user show 68314beaaee34463a8463c8408b86bb9 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 7300b6b694694611a08d8d4d10ff56a9 | | email | None | | enabled | True | | id | 68314beaaee34463a8463c8408b86bb9 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=f1725ab1608242e09ed79449a54fb398 + openstack role add --domain=7300b6b694694611a08d8d4d10ff56a9 --user=68314beaaee34463a8463c8408b86bb9 --user-domain=7300b6b694694611a08d8d4d10ff56a9 f1725ab1608242e09ed79449a54fb398 + openstack role assignment list --role=f1725ab1608242e09ed79449a54fb398 --user-domain=7300b6b694694611a08d8d4d10ff56a9 --user=68314beaaee34463a8463c8408b86bb9 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | f1725ab1608242e09ed79449a54fb398 | 68314beaaee34463a8463c8408b86bb9 | | | 7300b6b694694611a08d8d4d10ff56a9 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+