++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=7359fb3f259a4e08b65034672ef2d4f8 + openstack domain show 7359fb3f259a4e08b65034672ef2d4f8 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | 7359fb3f259a4e08b65034672ef2d4f8 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=7359fb3f259a4e08b65034672ef2d4f8 --description 'Service User for RegionOne/magnum' --password=p6isQt5W8yw7lfzHY25sYBzkAmFDN3zu magnum-domain-RegionOne + SERVICE_OS_USERID=11ec5433ecfc405a971c0ac1afa0bb0a + openstack user set --password=p6isQt5W8yw7lfzHY25sYBzkAmFDN3zu 11ec5433ecfc405a971c0ac1afa0bb0a + openstack user show 11ec5433ecfc405a971c0ac1afa0bb0a +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | 7359fb3f259a4e08b65034672ef2d4f8 | | email | None | | enabled | True | | id | 11ec5433ecfc405a971c0ac1afa0bb0a | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=6b6489f69474484d8c9976c07c5ab460 + openstack role add --domain=7359fb3f259a4e08b65034672ef2d4f8 --user=11ec5433ecfc405a971c0ac1afa0bb0a --user-domain=7359fb3f259a4e08b65034672ef2d4f8 6b6489f69474484d8c9976c07c5ab460 + openstack role assignment list --role=6b6489f69474484d8c9976c07c5ab460 --user-domain=7359fb3f259a4e08b65034672ef2d4f8 --user=11ec5433ecfc405a971c0ac1afa0bb0a +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 6b6489f69474484d8c9976c07c5ab460 | 11ec5433ecfc405a971c0ac1afa0bb0a | | | 7359fb3f259a4e08b65034672ef2d4f8 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+