Authenticate as "super_admin"

asked 2014-09-12 04:34:29 -0600

asd gravatar image

updated 2014-09-12 05:48:12 -0600

lafada gravatar image

Hi all,

i need to authenticate as a user that can see and modify all resources belong to all tenants in the cloud; in other words what i need are credentials that i can use through the Openstack RestAPI in order to eventually modify cloud resources. I try to create this user using the dashboard, but i don't understand what means the specifics roles relates to a user like: _member_ , Member, ResellerAdmin, anotherrole, heat_stack_owner, heat_stack_user, admin and service. Someone could clarify me these concepts? The second question is: is there a way to create the "super_admin" that has privileges and rights to which i refer above?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2014-09-12 04:56:45 -0600

Have you checked whether the 'admin' user and role is the one you want?

Take glance as an example. Using the python glance client I can specify '--owner <demo_tenant_id>' during commands run by admin to create and retrieve images owned by the demo tenant.

I'll leave it to you to check the other APIs to see if it fits your purpose.

edit flag offensive delete link more


e.g.: i have 3 tenants where each of them have some instances; i want to call an API, directly using the RestFul service, to get the list of all servers from all tenants. In order to obtain this, i need a token that it's not related to a specified project.

asd gravatar imageasd ( 2014-09-12 09:47:18 -0600 )edit

Ah ok. I think you will unfortunately need to add the admin (or another user) as having the admin role on each tenant you wish to manage. You'll need a token per tenant as well as far as I know.

The v3 API (though it is experimental) might work for your purposes but I know little about it.

Bertie gravatar imageBertie ( 2014-09-13 12:53:00 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-09-12 04:34:29 -0600

Seen: 121 times

Last updated: Sep 12 '14