++ openstack domain create --or-show --enable -f value -c id '--description=Service Domain for RegionOne/magnum' magnum + SERVICE_OS_DOMAIN_ID=d33040783bad4d038df4484c24088e52 + openstack domain show d33040783bad4d038df4484c24088e52 +-------------+-------------------------------------+ | Field | Value | +-------------+-------------------------------------+ | description | Service Domain for RegionOne/magnum | | enabled | True | | id | d33040783bad4d038df4484c24088e52 | | name | magnum | | options | {} | | tags | [] | +-------------+-------------------------------------+ ++ openstack user create --or-show --enable -f value -c id --domain=d33040783bad4d038df4484c24088e52 --description 'Service User for RegionOne/magnum' --password=8T6PKPVNhpvC2v5XBjpJlZspBz9RhCj3 magnum-domain-RegionOne + SERVICE_OS_USERID=589a501ce2bd4b83854fc014c80b39c6 + openstack user set --password=8T6PKPVNhpvC2v5XBjpJlZspBz9RhCj3 589a501ce2bd4b83854fc014c80b39c6 + openstack user show 589a501ce2bd4b83854fc014c80b39c6 +---------------------+-----------------------------------+ | Field | Value | +---------------------+-----------------------------------+ | default_project_id | None | | domain_id | d33040783bad4d038df4484c24088e52 | | email | None | | enabled | True | | id | 589a501ce2bd4b83854fc014c80b39c6 | | name | magnum-domain-RegionOne | | description | Service User for RegionOne/magnum | | password_expires_at | None | +---------------------+-----------------------------------+ ++ openstack role show -f value -c id admin + SERVICE_OS_ROLE_ID=da08d05f00ff48bab5ac9ab88931631e + openstack role add --domain=d33040783bad4d038df4484c24088e52 --user=589a501ce2bd4b83854fc014c80b39c6 --user-domain=d33040783bad4d038df4484c24088e52 da08d05f00ff48bab5ac9ab88931631e + openstack role assignment list --role=da08d05f00ff48bab5ac9ab88931631e --user-domain=d33040783bad4d038df4484c24088e52 --user=589a501ce2bd4b83854fc014c80b39c6 +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+ | da08d05f00ff48bab5ac9ab88931631e | 589a501ce2bd4b83854fc014c80b39c6 | | | d33040783bad4d038df4484c24088e52 | | False | +----------------------------------+----------------------------------+-------+---------+----------------------------------+--------+-----------+