<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(102,102,102)">Hi Derek, I think I understand - yes you can do that in horizon but you first need to "switch domain context" because default admin user is in domain "default". Now you can see the domains tab, you should see in there a button for setting the ldap context and then you can manage users like add to projects roles. </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><br></div><div class="gmail_default"><div class="gmail_default"><br></div><div class="gmail_default" style="color:rgb(102,102,102);font-family:verdana,sans-serif">Kind regards,</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><br></div><div><div dir="ltr" class="gmail_signature"><div dir="ltr">Tony Pearce<br><br></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 11 Jun 2021 at 17:32, Derek O keeffe <<a href="mailto:derekokeeffe85@yahoo.ie">derekokeeffe85@yahoo.ie</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div></div>
<div dir="ltr">Hi Tony,</div><div dir="ltr"><br></div><div dir="ltr">Thanks for that, worked first time!!</div><div dir="ltr"><br></div><div dir="ltr">Do you know if it's possible to allow the default domain admin edit the ldap members that are pulled into a domain? I can't seem to be able to see the users in that domain to change their roles through horizon. All works fine over cli. Thanks in advance.</div><div dir="ltr"><br></div><div dir="ltr">Regards,</div><div dir="ltr">Derek</div><div><br></div>
</div><div id="gmail-m_-8108255572970334763yahoo_quoted_4014243225">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;color:rgb(38,40,42)">
<div>
On Friday 11 June 2021, 10:24:37 IST, Tony Pearce <<a href="mailto:tonyppe@gmail.com" target="_blank">tonyppe@gmail.com</a>> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="gmail-m_-8108255572970334763yiv6994478177"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)">Hi Derek, </div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><br clear="none"></div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)">I think that you need to give admin privilege to view the domain tab. </div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><br clear="none"></div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)"># see domain tab in admin user</div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><div>openstack user list | grep admin</div><div>openstack role add --domain default --user [ID from previous command] admin</div><div><br clear="none"></div><div>So in my case I have previously used: </div><div><div>openstack user list | grep admin</div><div>openstack role add --domain default --user beae2211cad94afc83173d730cce0c85 admin</div></div></div><div style="font-family:verdana,sans-serif;color:rgb(102,102,102)"><br clear="none"></div><div><div dir="ltr"><div dir="ltr"><div><span style="font-family:verdana,sans-serif;color:rgb(102,102,102)">kind regards,</span></div></div></div></div><br clear="none"></div></div></div><br clear="none"><div id="gmail-m_-8108255572970334763yiv6994478177yqt38156"><div><div dir="ltr">On Fri, 11 Jun 2021 at 16:59, Derek O keeffe <<a rel="nofollow noopener noreferrer" shape="rect" href="mailto:derekokeeffe85@yahoo.ie" target="_blank">derekokeeffe85@yahoo.ie</a>> wrote:<br clear="none"></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:Helvetica,Arial,sans-serif;font-size:13px"><div dir="ltr">Hi all,</div><div dir="ltr"><br clear="none"></div><div dir="ltr">I have two domains in my setup (default & ldap)</div><div dir="ltr"><br clear="none"></div><div dir="ltr">If I log in as default admin I cannot see a domain tab in the identity dropdown (all cli works fine). I'm sure I had it there before and think it could be a setting in /etc/opoenstack-dashboard/local_settings.py</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Any pointers as to what I might be missing? Thanks in advance.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Regards,</div><div dir="ltr">Derek</div></div></div></blockquote></div></div>
</div></div></div>
</div>
</div></div></blockquote></div>