Ask Your Question
2

how do I know what permissions I have in my tenant?

asked 2015-11-13 11:49:40 -0500

dalexander gravatar image

How do I, as a non-admin user, list my permissions I have in my own tenant?

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
3

answered 2015-11-13 14:13:36 -0500

fgorbat gravatar image

updated 2015-12-02 08:33:45 -0500

Hello,

By default there are just two roles in OpenStack (keystone): admin and member. As a member you suppose to be able to work just inside of particular tenant, or if you assigned to more than one, you can have access to multiple tenants.

Usually as a member of the tenant you can do all activities inside the tenant based on the tenant quotas.

You should be able to create, destroy and modify: networks, virtual instances, assign and release floating ip's, create and destroy volumes, work with private and public images and etc..

Also, important to mention, as a member of the tenant you should be able to interact with cloud API's.

On the other hand, as a admin, you can do the same without limitation to particular tenant.

For more information check out the following link: http://docs.openstack.org/user-guide-...

Good luck!

edit flag offensive delete link more

Comments

Thanks for the awesome response! I will look more there....However (my bad for not being more specific!) how would I know as a user in a tenant, what my permissions are, without having to say, ask a cloud admin? Can I list my own permissions?

dalexander gravatar imagedalexander ( 2015-11-13 15:33:47 -0500 )edit
0

answered 2016-08-02 09:52:51 -0500

Josseph gravatar image

Hello , I have any questions because I am working with API v2 but I can work as Admin only.

I need to know how I can work as member (this member have project or tenant that i created as Admin) .

I need make the next consultations:

  • List all Flavors per Tenant(As Member), I used:

http://X.Y.Z.W:8774/v2/ID_TENANT/flavors

Return:

{
    "badRequest":
    {
        "message": "Malformed request URL: URL's project_id 'ID_TENANT' doesn't match Context's project_id 'ID_TENANT_ADMIN'",
        "code": 400
    }
}

Only return Flavors if I put as ID_TENANT an ID_TENANT_ADMIN.

I need to know I can access as member from API because I want to make same operations how if I use dashboard horizon.

Thanks for your help.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-11-13 11:49:40 -0500

Seen: 809 times

Last updated: Aug 02 '16