++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=fe73fa3918b94012b013a3f10e75e4ab + openstack domain show fe73fa3918b94012b013a3f10e75e4ab +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | fe73fa3918b94012b013a3f10e75e4ab | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=fe73fa3918b94012b013a3f10e75e4ab --description 'Service User for RegionOne/magnum' --password=lLWANQXc18Dul86UpXyUamOzXD8CJ9Gb magnum-domain-RegionOne + SERVICE_OS_USERID=051071bdf19148a98e0c668d50a77cb1 + openstack user set --password=lLWANQXc18Dul86UpXyUamOzXD8CJ9Gb 051071bdf19148a98e0c668d50a77cb1 + openstack user show 051071bdf19148a98e0c668d50a77cb1 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | fe73fa3918b94012b013a3f10e75e4ab | | email | None | | enabled | True | | id | 051071bdf19148a98e0c668d50a77cb1 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=cb2e9b1d2db84dba89b13aab53159312 + openstack role add --domain=fe73fa3918b94012b013a3f10e75e4ab --user=051071bdf19148a98e0c668d50a77cb1 --user-domain=fe73fa3918b94012b013a3f10e75e4ab cb2e9b1d2db84dba89b13aab53159312 + openstack role assignment list --role=cb2e9b1d2db84dba89b13aab53159312 --user-domain=fe73fa3918b94012b013a3f10e75e4ab --user=051071bdf19148a98e0c668d50a77cb1 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | cb2e9b1d2db84dba89b13aab53159312 | 051071bdf19148a98e0c668d50a77cb1 | | | fe73fa3918b94012b013a3f10e75e4ab | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+