180 lines
5.5 KiB
ReStructuredText
180 lines
5.5 KiB
ReStructuredText
Manage projects, users and roles (Identity tab)
|
|
================================================
|
|
|
|
OpenStack administrators can create projects, create accounts for new users
|
|
and create roles.
|
|
|
|
A project is the base unit of resource ownership. Resources are owned by
|
|
a specific project. A project is owned by a specific domain. A role is a
|
|
personality that a user assumes to perform a specific set of operations.
|
|
A role includes a set of rights and privileges. A user is an individual
|
|
consumer that is owned by a domain. A role explicitly associates a user
|
|
with projects or domains. A user with no assigned roles has no access
|
|
to OpenStack resources.
|
|
|
|
OpenStack Identity Service is the module in the OpenStack framework that
|
|
manages the authentication, service rules and service token functions.
|
|
For detailed information, refer to the
|
|
`OpenStack Keystone Guide <https://docs.openstack.org/keystone/latest/>`__.
|
|
|
|
Create a role
|
|
-------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Roles` category.
|
|
|
|
#. Click :guilabel:`Create Role`.
|
|
|
|
#. In the :guilabel:`Create Role` dialog box, enter the role :guilabel:`Name`
|
|
and :guilabel:`Description`.
|
|
|
|
#. Click :guilabel:`OK`.
|
|
|
|
The new role is now displayed in the :guilabel:`Roles` list.
|
|
|
|
Edit a role
|
|
-----------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Roles` category.
|
|
|
|
#. In the :guilabel:`Action` column of the role, click :guilabel:`Edit`.
|
|
|
|
#. In the :guilabel:`Edit` dialog box, update :guilabel:`Name` and
|
|
:guilabel:`Description` of the role.
|
|
|
|
#. Click :guilabel:`OK`.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
Delete a role
|
|
--------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Roles` category.
|
|
|
|
#. Select the check boxes for the roles that you want to delete.
|
|
|
|
#. Click :guilabel:`Delete` and confirm your choice.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
Add a new project
|
|
-----------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Projects` category.
|
|
|
|
#. Click :guilabel:`Create Project`.
|
|
|
|
#. In the :guilabel:`Create Project` dialog box, enter the Project
|
|
:guilabel:`Name`, :guilabel:`Description`, :guilabel:`Status`
|
|
and :guilabel:`Affiliated Domain`.
|
|
|
|
#. Click :guilabel:`OK`.
|
|
|
|
The new project is now displayed in the :guilabel:`Projects` list.
|
|
|
|
Delete a project
|
|
----------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Projects` category.
|
|
|
|
#. Select the check boxes for the projects that you want to delete.
|
|
|
|
#. Click :guilabel:`Delete` and confirm your choice.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
Update a project
|
|
----------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Projects` category.
|
|
|
|
#. In the :guilabel:`Action` column of the project, click :guilabel:`Edit`.
|
|
|
|
#. In the :guilabel:`Edit` dialog box, update :guilabel:`Name` and
|
|
:guilabel:`Description` of the project.
|
|
|
|
#. Click :guilabel:`OK`.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
.. note::
|
|
|
|
You can enable or disable the project by using the :guilabel:`Enable` or
|
|
:guilabel:`Forbidden` options available in the :guilabel:`More` dropdown
|
|
list.
|
|
|
|
Add a new user
|
|
---------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Users` category.
|
|
|
|
#. On the :guilabel:`Create User` page, enter the user :guilabel:`User Name`,
|
|
:guilabel:`Password`, :guilabel:`Confirm Password`, :guilabel:`Email`,
|
|
:guilabel:`Phone`, :guilabel:`Real Name` and :guilabel:`Status`.
|
|
|
|
If you choose :guilabel:`Advanced Options`, new fields for
|
|
:guilabel:`Select Project` and :guilabel:`Select User Group` display. You can
|
|
assign role to user on project. You can also add user to group.
|
|
|
|
#. Click :guilabel:`Confirm`.
|
|
|
|
The new user is now displayed in the :guilabel:`Users` list.
|
|
|
|
Delete a user
|
|
--------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Users` category.
|
|
|
|
#. Select the check boxes for the users that you want to delete.
|
|
|
|
#. Click :guilabel:`Delete` and confirm your choice.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
Update a user
|
|
-------------
|
|
|
|
#. Log into the OpenStack Dashboard as the Admin user.
|
|
|
|
#. On the :guilabel:`Administrator` page, open the :guilabel:`Identity` tab and
|
|
click :guilabel:`Users` category.
|
|
|
|
#. In the :guilabel:`Action` column of the user, click :guilabel:`Edit`.
|
|
|
|
#. In the :guilabel:`Edit` dialog box, update :guilabel:`User Name`,
|
|
:guilabel:`Description`, :guilabel:`Email`, :guilabel:`Phone` and
|
|
:guilabel:`Real Name` of the user.
|
|
|
|
#. Click :guilabel:`OK`.
|
|
|
|
A message indicates whether the action was successful.
|
|
|
|
.. note::
|
|
|
|
You can enable or disable the user by using the :guilabel:`Enable` or
|
|
:guilabel:`Forbidden` options available in the :guilabel:`More` dropdown
|
|
list.
|