++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=d93e2bf24e4340f0815d851269342b08 + openstack domain show d93e2bf24e4340f0815d851269342b08 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | id | d93e2bf24e4340f0815d851269342b08 | | name | magnum | | enabled | True | | description | Service Domain for RegionOne/magnum | | options | {} | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=d93e2bf24e4340f0815d851269342b08 --description 'Service User for RegionOne/magnum' --password=Yt8nCwl6TfixmQjj7087VB0pqudP26Yg magnum-domain-RegionOne + SERVICE_OS_USERID=aeec83c9891a44429364fcb249cdae43 + openstack user set --password=Yt8nCwl6TfixmQjj7087VB0pqudP26Yg aeec83c9891a44429364fcb249cdae43 + openstack user show aeec83c9891a44429364fcb249cdae43 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | d93e2bf24e4340f0815d851269342b08 | | email | None | | enabled | True | | id | aeec83c9891a44429364fcb249cdae43 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | | options | {} | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=002e661299094c72950f086ebabbf9f1 + openstack role add --domain=d93e2bf24e4340f0815d851269342b08 --user=aeec83c9891a44429364fcb249cdae43 --user-domain=d93e2bf24e4340f0815d851269342b08 002e661299094c72950f086ebabbf9f1 + openstack role assignment list --role=002e661299094c72950f086ebabbf9f1 --user-domain=d93e2bf24e4340f0815d851269342b08 --user=aeec83c9891a44429364fcb249cdae43 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | 002e661299094c72950f086ebabbf9f1 | aeec83c9891a44429364fcb249cdae43 | | | d93e2bf24e4340f0815d851269342b08 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+