can admin role in tenant 1 be admin in tenant 2?

asked 2015-07-12 11:24:21 -0500

Debao Qin gravatar image

Hi,

I just started to learn openstack. So please forgive me to ask a quite stupid question.

If a user A has a admin role in tenant 1, can it be considered also granted admin role in other tenants under the same domain?

What is the boundary of admin role then?

Thanks a lot

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
2

answered 2015-07-13 10:37:18 -0500

No. Role assignment is a tuple ( user, tenant, role) . If you wan't "admin" role for another tenant for the same user, you need to explictly assign it. This is the most commonly used pattern.

Having said that, there is a way to inherit roles if you have tenant hieracrhy. It is an experimental feature in Kilo

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2015-07-12 11:24:21 -0500

Seen: 98 times

Last updated: Jul 13 '15