<html>
<head>
<meta content="text/html; charset=Big5" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">The CLI keystone user-role-list should
be returning that, so long as you don't filter by tenant.<br>
<br>
From an API perspective, you would call<br>
<br>
/users/{user_id}/roles<br>
<br>
<a class="moz-txt-link-freetext" href="http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-users-user-id-roles">http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-users-user-id-roles</a><br>
<br>
<br>
On 07/18/2013 04:04 AM, Peter Cheung wrote:<br>
</div>
<blockquote cite="mid:BAY177-W34E0DBA8B6F55E5523A5C9B5620@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">I understand now, the tenant is keystone user-get
is the default tenant ID. User can have many roles in different
tenant.
<div>But we don't have a command to list out all roles among all
tenant for a specific user.</div>
<div><br>
</div>
<div>take a look this screen:</div>
<div><a moz-do-not-send="true"
href="http://peter.kingofcoders.com/?p=779" target="_blank">http://peter.kingofcoders.com/?p=779</a></div>
<div><br>
</div>
<div><br>
<br>
<div>
<hr id="stopSpelling">Date: Thu, 18 Jul 2013 00:15:52 -0400<br>
From: <a class="moz-txt-link-abbreviated" href="mailto:ayoung@redhat.com">ayoung@redhat.com</a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Subject: Re: [Openstack] can one user in multiple tenants?<br>
<br>
<div class="ecxmoz-cite-prefix">On 07/18/2013 12:12 AM,
Peter Cheung wrote:<br>
</div>
<blockquote
cite="mid:BAY177-W87657F668658DEE89F052B5620@phx.gbl">
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr">Hi all
<div> 1) can one user in multiple tenants? I think
yes, but when i "keystone user-get", i can see only
one tenant field. <br>
</div>
</div>
</blockquote>
User has a role assignemnt. The default role is Member, and
they can have this role in multiple tenants. You are seeing
the default tenant field.<br>
<br>
<blockquote
cite="mid:BAY177-W87657F668658DEE89F052B5620@phx.gbl">
<div dir="ltr">
<div> 2) how can i assign another tenant to a specific
user? which command can do that?</div>
</div>
</blockquote>
keystone user-role-add <br>
<br>
<blockquote
cite="mid:BAY177-W87657F668658DEE89F052B5620@phx.gbl">
<div dir="ltr">
<div><br>
<br>
Thanks
<div>from Peter</div>
</div>
</div>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
Mailing list: <a moz-do-not-send="true" class="ecxmoz-txt-link-freetext" href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a>
Post to : <a moz-do-not-send="true" class="ecxmoz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a moz-do-not-send="true" class="ecxmoz-txt-link-freetext" href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a>
More help : <a moz-do-not-send="true" class="ecxmoz-txt-link-freetext" href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a>
</pre>
</blockquote>
<br>
<br>
_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
More help : <a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a></div>
</div>
</div>
</blockquote>
<br>
</body>
</html>