keystone - Difference between Global Role and Tenant Role in Openstack -
i have noticed api documentation makes reference global roles , tenant roles. e.g.
the link http://developer.openstack.org/api-ref-identity-v2.html#identity-v2-ext has operation on
/v2.0/users/{user_id}/roles
that says 'lists global roles specified user. excludes tenant roles' when call admin user using openstack.net sdk (getrolesbyuser), can see makes call correctly response saying...
{ "error": { "message": "user roles not supported: tenant id required", "code": 501, "title": "not implemented" } }
so what's difference between tenant roles , global roles. has api call been deprecated openstack or something?
it seems roles roles, it's terminology , in current version can't assign roles user without involving tenant. see link below more information.
Comments
Post a Comment