++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=9a738acf0488494492a5ab08668b679d + openstack domain show 9a738acf0488494492a5ab08668b679d +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 9a738acf0488494492a5ab08668b679d | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=9a738acf0488494492a5ab08668b679d --description 'Service User for RegionOne/magnum' --password=eYc2dR2yFTRcl7JmpJzwBdXZUq1b5kNE magnum-domain-RegionOne + SERVICE_OS_USERID=ec01abafaa6943f29b7e29f58fb411f9 + openstack user set --password=eYc2dR2yFTRcl7JmpJzwBdXZUq1b5kNE ec01abafaa6943f29b7e29f58fb411f9 + openstack user show ec01abafaa6943f29b7e29f58fb411f9 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 9a738acf0488494492a5ab08668b679d | | email | None | | enabled | True | | id | ec01abafaa6943f29b7e29f58fb411f9 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=c8150bf6e59d4b41bf496db550164bda + openstack role add --domain=9a738acf0488494492a5ab08668b679d --user=ec01abafaa6943f29b7e29f58fb411f9 --user-domain=9a738acf0488494492a5ab08668b679d c8150bf6e59d4b41bf496db550164bda + openstack role assignment list --role=c8150bf6e59d4b41bf496db550164bda --user-domain=9a738acf0488494492a5ab08668b679d --user=ec01abafaa6943f29b7e29f58fb411f9 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | c8150bf6e59d4b41bf496db550164bda | ec01abafaa6943f29b7e29f58fb411f9 | | | 9a738acf0488494492a5ab08668b679d | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+