Create and manage roles
A role is a personality that a user assumes to perform a specific set
of operations. A role includes a set of rights and privileges. A user
assumes that role inherits those rights and privileges.
Note
OpenStack Identity service defines a user’s role on a project, but it
is completely up to the individual service to define what that role
means. This is referred to as the service’s policy. To get details about
what the privileges for each role are, refer to the
policy.json file available for each service in the
/etc/SERVICE/policy.json file. For example, the policy
defined for OpenStack Identity service is defined in the
/etc/keystone/policy.json file.
Create a role
-
Log in to the dashboard and select the
adminproject from the
drop-down list. -
On the
Identitytab, click theRolescategory. -
Click the
Create Rolebutton.In the
Create Rolewindow, enter a name for the
role. -
Click the
Create Rolebutton to confirm your
changes.
Edit a role
-
Log in to the dashboard and select the
Identityproject from
the drop-down list. -
On the
Identitytab, click theRolescategory. -
Click the
Editbutton.In the
Update Rolewindow, enter a new name for the
role. -
Click the
Update Rolebutton to confirm your
changes.
Note
Using the dashboard, you can edit only the name assigned to a
role.
Delete a role
-
Log in to the dashboard and select the
Identityproject from
the drop-down list. -
On the
Identitytab, click theRolescategory. -
Select the role you want to delete and click the
Deletebutton.
Roles -
In the
Confirm Delete Roleswindow, clickDeleteto confirm the deletion.
RolesYou cannot undo this action.