Identity v2, v3
Add role to a user or group in a project or domain
os role add
--domain <domain> | --project <project> [--project-domain <project-domain>]
--user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
<role>
Include <domain> (name or ID)
New in version 3.
Include <project> (name or ID)
Include <user> (name or ID)
Include <group> (name or ID)
New in version 3.
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
New in version 3.
Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.
New in version 3.
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
New in version 3.
Role to add to <project>:<user> (name or ID)
List roles
os role list
--domain <domain> | --project <project> [--project-domain <project-domain>]
--user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
Filter roles by <domain> (name or ID)
New in version 3.
Filter roles by <project> (name or ID)
New in version 3.
Filter roles by <user> (name or ID)
New in version 3.
Filter roles by <group> (name or ID)
New in version 3.
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
New in version 3.
Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.
New in version 3.
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
New in version 3.
Remove role from domain/project : user/group
os role remove
--domain <domain> | --project <project> [--project-domain <project-domain>]
--user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
<role>
Include <domain> (name or ID)
New in version 3.
Include <project> (name or ID)
Include <user> (name or ID)
Include <group> (name or ID)
New in version 3.
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
New in version 3.
Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.
New in version 3.
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
New in version 3.
Role to remove (name or ID)