++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=58f90e06a14440b6bf76f601c411e819 + openstack domain show 58f90e06a14440b6bf76f601c411e819 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 58f90e06a14440b6bf76f601c411e819 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=58f90e06a14440b6bf76f601c411e819 --description 'Service User for RegionOne/magnum' --password=HPVi7AY5vtKctZfhJWTzcDUEmuJBDZy3 magnum-domain-RegionOne + SERVICE_OS_USERID=57e5a40540084b69873a27ed600361ef + openstack user set --password=HPVi7AY5vtKctZfhJWTzcDUEmuJBDZy3 57e5a40540084b69873a27ed600361ef + openstack user show 57e5a40540084b69873a27ed600361ef +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 58f90e06a14440b6bf76f601c411e819 | | email | None | | enabled | True | | id | 57e5a40540084b69873a27ed600361ef | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=41a2b8ab73934241b160c7afea919a00 + openstack role add --domain=58f90e06a14440b6bf76f601c411e819 --user=57e5a40540084b69873a27ed600361ef --user-domain=58f90e06a14440b6bf76f601c411e819 41a2b8ab73934241b160c7afea919a00 + openstack role assignment list --role=41a2b8ab73934241b160c7afea919a00 --user-domain=58f90e06a14440b6bf76f601c411e819 --user=57e5a40540084b69873a27ed600361ef +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 41a2b8ab73934241b160c7afea919a00 | 57e5a40540084b69873a27ed600361ef | | | 58f90e06a14440b6bf76f601c411e819 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+