++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/heat' heat
+ SERVICE_OS_DOMAIN_ID=d4cb420619d94a81a67e2be1ae89e37e
+ openstack domain show d4cb420619d94a81a67e2be1ae89e37e
+-------------+-----------------------------------+
| Field       | Value                             |
+-------------+-----------------------------------+
| description | Service Domain for RegionOne/heat |
| enabled     | True                              |
| id          | d4cb420619d94a81a67e2be1ae89e37e  |
| name        | heat                              |
| options     | {}                                |
| tags        | []                                |
+-------------+-----------------------------------+
++ openstack user create --or-show --enable -f value -c id --domain=d4cb420619d94a81a67e2be1ae89e37e --description 'Service User for RegionOne/heat' --password=rpwlt6wpmQscjFC4OC4DbXxyFsjAWflE heat-stack-user-RegionOne
+ SERVICE_OS_USERID=6f07865224e147798153e2a9235d69dd
+ openstack user set --password=rpwlt6wpmQscjFC4OC4DbXxyFsjAWflE 6f07865224e147798153e2a9235d69dd
+ openstack user show 6f07865224e147798153e2a9235d69dd
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | None                             |
| domain_id           | d4cb420619d94a81a67e2be1ae89e37e |
| email               | None                             |
| enabled             | True                             |
| id                  | 6f07865224e147798153e2a9235d69dd |
| name                | heat-stack-user-RegionOne        |
| description         | Service User for RegionOne/heat  |
| password_expires_at | None                             |
+---------------------+----------------------------------+
++ openstack role show -f value -c id admin
+ SERVICE_OS_ROLE_ID=08a32c4b8fc04f24b0042a965e1f6493
+ openstack role add --domain=d4cb420619d94a81a67e2be1ae89e37e --user=6f07865224e147798153e2a9235d69dd --user-domain=d4cb420619d94a81a67e2be1ae89e37e 08a32c4b8fc04f24b0042a965e1f6493
+ openstack role assignment list --role=08a32c4b8fc04f24b0042a965e1f6493 --user-domain=d4cb420619d94a81a67e2be1ae89e37e --user=6f07865224e147798153e2a9235d69dd
+----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+
| Role                             | User                             | Group | Project | Domain                           | System | Inherited |
+----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+
| 08a32c4b8fc04f24b0042a965e1f6493 | 6f07865224e147798153e2a9235d69dd |       |         | d4cb420619d94a81a67e2be1ae89e37e |        | False     |
+----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+