5eb7e626b1
A role entity can now be specified as domain specific. Closes-bug: #1606105 Change-Id: I564cf3da1d61f5bfcf85be591480d2f5c8d694a0
107 lines
2.1 KiB
ReStructuredText
107 lines
2.1 KiB
ReStructuredText
===============
|
|
role assignment
|
|
===============
|
|
|
|
Identity v2, v3
|
|
|
|
role assignment list
|
|
--------------------
|
|
|
|
List role assignments
|
|
|
|
.. program:: role assignment list
|
|
.. code:: bash
|
|
|
|
os role assignment list
|
|
[--role <role>]
|
|
[--role-domain <role-domain>]
|
|
[--user <user>]
|
|
[--user-domain <user-domain>]
|
|
[--group <group>]
|
|
[--group-domain <group-domain>]
|
|
[--domain <domain>]
|
|
[--project <project>]
|
|
[--project-domain <project-domain>]
|
|
[--effective]
|
|
[--inherited]
|
|
[--names]
|
|
|
|
.. option:: --role <role>
|
|
|
|
Role to filter (name or ID)
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --role-domain <role-domain>
|
|
|
|
Domain the role belongs to (name or ID).
|
|
This can be used in case collisions between role names exist.
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --user <user>
|
|
|
|
User to filter (name or ID)
|
|
|
|
.. option:: --user-domain <user-domain>
|
|
|
|
Domain the user belongs to (name or ID).
|
|
This can be used in case collisions between user names exist.
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --group <group>
|
|
|
|
Group to filter (name or ID)
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --group-domain <group-domain>
|
|
|
|
Domain the group belongs to (name or ID).
|
|
This can be used in case collisions between group names exist.
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --domain <domain>
|
|
|
|
Domain to filter (name or ID)
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --project <project>
|
|
|
|
Project to filter (name or ID)
|
|
|
|
.. option:: --project-domain <project-domain>
|
|
|
|
Domain the project belongs to (name or ID).
|
|
This can be used in case collisions between project names exist.
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --effective
|
|
|
|
Returns only effective role assignments (defaults to False)
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --inherited
|
|
|
|
Specifies if the role grant is inheritable to the sub projects
|
|
|
|
.. versionadded:: 3
|
|
|
|
.. option:: --names
|
|
|
|
Returns role assignments with names instead of IDs
|
|
|
|
.. option:: --auth-user
|
|
|
|
Returns role assignments for the authenticated user.
|
|
|
|
.. option:: --auth-project
|
|
|
|
Returns role assignments for the project to which the authenticated user
|
|
is scoped.
|