.. xdd1485354265196
.. _openstack-keystone-accounts:

===========================
OpenStack Keystone Accounts
===========================

|prod-os| uses Keystone for Identity Management which defines projects/tenants
for grouping OpenStack resources and users for managing access to these
resources.

|prod-os| provides a local SQL Backend for Keystone.

You can create OpenStack projects and users from the |os-prod-hor-long|
or the CLI. Projects and users can also be managed using the OpenStack REST
API.

.. seealso::
    :ref:`System Account Password Rules <security-system-account-password-rules>`