[openstack-dev] [Keystone] Domains and projects

Dolph Mathews dolph.mathews at gmail.com
Fri Apr 12 14:29:41 UTC 2013

On Fri, Apr 12, 2013 at 9:15 AM, K.W.S.Siu <K.W.S.Siu at kent.ac.uk> wrote:

> Hi,
> I have a question related to domains and projects. Looking at the Identity
> API I see you can create a grant for a Role on a Project , or create a
> grant for a Role on a Domain, but not create a grant for a Role on a
> Project and Domain.

Creating a pair of role grants on a "project and domain" would be a
combination of the prior to calls you mentioned.

> So I am wondering the following:
> 1. Can roles on projects be constrained to a particular domain?

I'm not sure I understand the question? A role on a project would not apply
to resources not owned by that project.

> 2. Are projects domain specific?

Yes, a project is owned by a single domain.

> Many thanks,
> Kristy
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130412/c90d579e/attachment.html>

More information about the OpenStack-dev mailing list