Creating roles and assigning to user & tenants is definitely supported, and is a bit convoluted under the covers of the V2.0 REST API. I'd recommend doing the adding using the python-keystoneclient command line interface (install python-keystoneclient with "python setup.py install", and then you have a command "keystone" which does a lot of the command line interactions.

There's bugs with it (current list at http://adam.younglogic.com/2012/02/openstack-keystone-ldap-redux/ (http://adam.younglogic.com/2012/02/op...) ), but currently if you add --debug, it does show you the details of the HTTP request and response used to enable that functionality.

Hi, I am trying to do the same thing from my python script. I tried to do it from add_user function in tenants.py and also add_user_role in roles.py(which is actually called from add_user function) but I am getting a 404-resource not found. Also the format in which tenant, user and role id are described is also missing. Horizon directly passes ids, probably as integers or some other format(which I am unable to find) but add_user_role does a base.getid on all so, a direct passing of integers will always throw an error, right? Any insights? Thanks

Hi,

I am familiar with keystone role such as member, admin. Both the roles has different access permissions. can anybody guide on complete roles in keystone ?? Admin role is admin for specific project. i want to be a role which is admin of all keystone tenants.

please send any links .

thanks in advance.