keystone - Difference between Global Role and Tenant Role in Openstack -


i have noticed api documentation makes reference global roles , tenant roles. e.g.

the link http://developer.openstack.org/api-ref-identity-v2.html#identity-v2-ext has operation on

/v2.0/users/​{user_id}​/roles 

that says 'lists global roles specified user. excludes tenant roles' when call admin user using openstack.net sdk (getrolesbyuser), can see makes call correctly response saying...

{   "error":     {        "message": "user roles not supported: tenant id required",        "code": 501,        "title": "not implemented"     } } 

so what's difference between tenant roles , global roles. has api call been deprecated openstack or something?

it seems roles roles, it's terminology , in current version can't assign roles user without involving tenant. see link below more information.

https://ask.openstack.org/en/question/33488/api-request-returns-user-roles-not-supported-tenant-id-required/


Comments

Popular posts from this blog

javascript - RequestAnimationFrame not working when exiting fullscreen switching space on Safari -

Python ctypes access violation with const pointer arguments -