++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=d66bbec33be444259f2ff92f080cb33e + openstack domain show d66bbec33be444259f2ff92f080cb33e +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | d66bbec33be444259f2ff92f080cb33e | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=d66bbec33be444259f2ff92f080cb33e --description 'Service User for RegionOne/magnum' --password=beWUfEijZ0whbbNnHoCPnJoOOKuLKEna magnum-domain-RegionOne + SERVICE_OS_USERID=1c0c9d871af146059fb1bd721855b175 + openstack user set --password=beWUfEijZ0whbbNnHoCPnJoOOKuLKEna 1c0c9d871af146059fb1bd721855b175 + openstack user show 1c0c9d871af146059fb1bd721855b175 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | d66bbec33be444259f2ff92f080cb33e | | email | None | | enabled | True | | id | 1c0c9d871af146059fb1bd721855b175 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=eecca36632004c7796e420dcecebc296 + openstack role add --domain=d66bbec33be444259f2ff92f080cb33e --user=1c0c9d871af146059fb1bd721855b175 --user-domain=d66bbec33be444259f2ff92f080cb33e eecca36632004c7796e420dcecebc296 + openstack role assignment list --role=eecca36632004c7796e420dcecebc296 --user-domain=d66bbec33be444259f2ff92f080cb33e --user=1c0c9d871af146059fb1bd721855b175 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | eecca36632004c7796e420dcecebc296 | 1c0c9d871af146059fb1bd721855b175 | | | d66bbec33be444259f2ff92f080cb33e | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+