<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Keystone has, for a number of releases, supported the concept of inherited role assignments via the OS-INHERIT extension. At the Keystone mid-cycle we agreed moving this to core this was a good target for Liberty, but this was held by needing the data driver testing to be in place (<a href="https://review.openstack.org/#/c/190996/" class="">https://review.openstack.org/#/c/190996/</a>).<div class=""><br class=""></div><div class="">Inherited roles are becoming an integral part of Keystone, especially with the move to hierarchal projects (which is core already) - and so moving inheritance to core makes a lot of sense. At the same time as the move, we want to tidy up the API (<a href="https://review.openstack.org/#/c/187045/" class="">https://review.openstack.org/#/c/200434/</a>) to be more consistent with project hierarchies (before the old API semantics get too widely used), although we will continue to support the old API via the extension for a number of cycles.<br class=""><div class=""><div class=""><br class=""></div><div class="">I would like to request an FFE for the move of inheritance to core.</div><div class=""><br class=""></div><div class="">Henry</div></div></div></body></html>