Hello, How to list the role of particular user in specific project with openstack client? With old keystone client user-role-list used to do this but there is no similar command in openstack client ? Thanks
Try
openstack role list --user <user_id> --project <--project_id>
There is nothing called user-role-list, it is always user-role-list for a project in keystoneclient
Update 1:
You need to export environment variable to list v3 apis available
export OS_IDENTITY_API_VERSION=3
/opt/stack$ export OS_IDENTITY_API_VERSION=3
/opt/stack$ openstack help role list
usage: openstack role list [-h] [-f {csv,html,json,table,yaml}] [-c COLUMN]
[--max-width <integer>]
[--quote {all,minimal,none,nonnumeric}]
[--domain <domain> | --project <project>]
[--user <user> | --group <group>]
List roles
optional arguments:
-h, --help show this help message and exit
--domain <domain> Filter roles by <domain> (name or ID)
--project <project> Filter roles by <project> (name or ID)
--user <user> Filter roles by <user> (name or ID)
--group <group> Filter roles by <group> (name or ID)
Openstack client is by default v2.0 and it will only list v2 apis. You need to switch the mode to use V3. Try after exporting this environment variable
export OS_IDENTITY_API_VERSION=3
openstack role assignment list --names
besides to what Haneef mentioned using the unified openstack client you can also use the keystone v3 rest api to do that excerpt from keystone v3 api ref http://developer.openstack.org/api-re...
v3/domains/{domain_id}/users/{user_id}/roles
List roles for domain user
Lists roles for a user on a domain.
close
Normal response codes
200
Error response codes
Bad Request (400), Unauthorized (401), Forbidden (403), Method Not Allowed (405), Request Entity Too Large (413), Service Unavailable (503), Not Found (404)
Request parameters
Parameter Style Type Description
domain_id URI capi:uuid
The domain ID.
user_id URI capi:uuid
The user ID.
[
{
"id": "--role-id--",
"name": "--role-name--"
},
{
"id": "--role-id--",
"name": "--role-name--"
}
]
This operation does not accept a request body.
Hope that helps!
Vic
In Ocata release, you will encounter this error:
# openstack role list --user swift
Listing assignments using role list is deprecated. Use role assignment list --user <user-name> --domain default --names instead.
Then you use this instead
# openstack role assignment list --names
+---------------+--------------------+-------+------------------+--------+-----------+
| Role | User | Group | Project | Domain | Inherited |
+---------------+--------------------+-------+------------------+--------+-----------+
| admin | neutron@Default | | services@Default | | False |
| admin | placement@Default | | services@Default | | False |
| admin | glance@Default | | services@Default | | False |
| admin | cinder@Default | | services@Default | | False |
| admin | aodh@Default | | services@Default | | False |
| admin | admin@Default | | admin@Default | | False |
| admin | nova@Default | | services@Default | | False |
| admin | swift@Default | | services@Default | | False |
| admin | gnocchi@Default | | services@Default | | False |
| ResellerAdmin | ceilometer@Default | | services@Default | | False |
| admin | ceilometer@Default | | services@Default | | False |
+---------------+--------------------+-------+------------------+--------+-----------+
Asked: 2015-01-06 05:09:38 -0500
Seen: 9,422 times
Last updated: Jul 28 '17