++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=b929c40f7c664cf49c074de467cce462 + openstack domain show b929c40f7c664cf49c074de467cce462 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | b929c40f7c664cf49c074de467cce462 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=b929c40f7c664cf49c074de467cce462 --description 'Service User for RegionOne/magnum' --password=745La7u84mWXg6uZEK5AHKNlj9b5hbGH magnum-domain-RegionOne + SERVICE_OS_USERID=1e2316c6b005430798ce961aa8756306 + openstack user set --password=745La7u84mWXg6uZEK5AHKNlj9b5hbGH 1e2316c6b005430798ce961aa8756306 + openstack user show 1e2316c6b005430798ce961aa8756306 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | b929c40f7c664cf49c074de467cce462 | | email | None | | enabled | True | | id | 1e2316c6b005430798ce961aa8756306 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=c37e86922ee540eb9e7df9d7ba5119a6 + openstack role add --domain=b929c40f7c664cf49c074de467cce462 --user=1e2316c6b005430798ce961aa8756306 --user-domain=b929c40f7c664cf49c074de467cce462 c37e86922ee540eb9e7df9d7ba5119a6 + openstack role assignment list --role=c37e86922ee540eb9e7df9d7ba5119a6 --user-domain=b929c40f7c664cf49c074de467cce462 --user=1e2316c6b005430798ce961aa8756306 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | c37e86922ee540eb9e7df9d7ba5119a6 | 1e2316c6b005430798ce961aa8756306 | | | b929c40f7c664cf49c074de467cce462 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+