skyline-console/doc/source/admin/identity.rst

Manage projects, users and roles (Identity tab)

OpenStack administrators can create projects, create accounts for new users and create roles.

A project is the base unit of resource ownership. Resources are owned by a specific project. A project is owned by a specific domain. A role is a personality that a user assumes to perform a specific set of operations. A role includes a set of rights and privileges. A user is an individual consumer that is owned by a domain. A role explicitly associates a user with projects or domains. A user with no assigned roles has no access to OpenStack resources.

OpenStack Identity Service is the module in the OpenStack framework that manages the authentication, service rules and service token functions. For detailed information, refer to the OpenStack Keystone Guide.

Create a role

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Roles category.

3. Click Create Role.

4. In the Create Role dialog box, enter the role Name and Description.

5. Click OK.

   The new role is now displayed in the Roles list.

Edit a role

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Roles category.

3. In the Action column of the role, click Edit.

4. In the Edit dialog box, update Name and Description of the role.

5. Click OK.

   A message indicates whether the action was successful.

Delete a role

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Roles category.

3. Select the check boxes for the roles that you want to delete.

4. Click Delete and confirm your choice.

   A message indicates whether the action was successful.

Add a new project

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Projects category.

3. Click Create Project.

4. In the Create Project dialog box, enter the Project Name, Description, Status and Affiliated Domain.

5. Click OK.

   The new project is now displayed in the Projects list.

Delete a project

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Projects category.

3. Select the check boxes for the projects that you want to delete.

4. Click Delete and confirm your choice.

   A message indicates whether the action was successful.

Update a project

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Projects category.

3. In the Action column of the project, click Edit.

4. In the Edit dialog box, update Name and Description of the project.

5. Click OK.

   A message indicates whether the action was successful.

   Note

   You can enable or disable the project by using the Enable or Forbidden options available in the More dropdown list.

Add a new user

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Users category.

3. On the Create User page, enter the user User Name, Password, Confirm Password, Email, Phone, Real Name and Status.

   If you choose Advanced Options, new fields for Select Project and Select User Group display. You can assign role to user on project. You can also add user to group.

4. Click Confirm.

   The new user is now displayed in the Users list.

Delete a user

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Users category.

3. Select the check boxes for the users that you want to delete.

4. Click Delete and confirm your choice.

   A message indicates whether the action was successful.

Update a user

1. Log into the OpenStack Dashboard as the Admin user.

2. On the Administrator page, open the Identity tab and click Users category.

3. In the Action column of the user, click Edit.

4. In the Edit dialog box, update User Name, Description, Email, Phone and Real Name of the user.

5. Click OK.

   A message indicates whether the action was successful.

   Note

   You can enable or disable the user by using the Enable or Forbidden options available in the More dropdown list.