++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=de5915d12975494e9f0be92bb6ffaebe + openstack domain show de5915d12975494e9f0be92bb6ffaebe +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | de5915d12975494e9f0be92bb6ffaebe | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=de5915d12975494e9f0be92bb6ffaebe --description 'Service User for RegionOne/magnum' --password=ItT6tfNrPXv8YxC7OmG47PExUBtcuJea magnum-domain-RegionOne + SERVICE_OS_USERID=b64995573d7c403b9c8c42db8866c228 + openstack user set --password=ItT6tfNrPXv8YxC7OmG47PExUBtcuJea b64995573d7c403b9c8c42db8866c228 + openstack user show b64995573d7c403b9c8c42db8866c228 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | de5915d12975494e9f0be92bb6ffaebe | | email | None | | enabled | True | | id | b64995573d7c403b9c8c42db8866c228 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=27dc107dd84a42d5afb762f39ae2d80a + openstack role add --domain=de5915d12975494e9f0be92bb6ffaebe --user=b64995573d7c403b9c8c42db8866c228 --user-domain=de5915d12975494e9f0be92bb6ffaebe 27dc107dd84a42d5afb762f39ae2d80a + openstack role assignment list --role=27dc107dd84a42d5afb762f39ae2d80a --user-domain=de5915d12975494e9f0be92bb6ffaebe --user=b64995573d7c403b9c8c42db8866c228 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 27dc107dd84a42d5afb762f39ae2d80a | b64995573d7c403b9c8c42db8866c228 | | | de5915d12975494e9f0be92bb6ffaebe | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+