<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>thanks Adam</div>
<div>Peter.</div>
<br>
<br>
<br>
-------- 原有訊息 --------<br>
由： Adam Young <ayoung@redhat.com> <br>
日期： 2013-07-18 23:50 (GMT+08:00) <br>
至： Peter Cheung <mcheung63@hotmail.com> <br>
抄送： openstack@lists.launchpad.net <br>
主題： Re: [Openstack] can one user in multiple tenants? <br>
<br>
<br>
<div style="background-color:#FFFFFF">
<div class="x_moz-cite-prefix">The CLI keystone user-role-list should be returning that, so long as you don't filter by tenant.<br>
<br>
>From an API perspective, you would call<br>
<br>
/users/{user_id}/roles<br>
<br>
<a class="x_moz-txt-link-freetext" href="http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-users-user-id-roles">http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-users-user-id-roles</a><br>
<br>
<br>
On 07/18/2013 04:04 AM, Peter Cheung wrote:<br>
</div>
<blockquote type="cite"><style>
<!--
.x_hmmessage
{margin:0px;
padding:0px}
body.x_hmmessage
{font-size:12pt;
font-family:Calibri}
-->
</style>
<div dir="ltr">I understand now, the tenant is keystone user-get is the default tenant ID. User can have many roles in different tenant.
<div>But we don't have a command to list out all roles among all tenant for a specific user.</div>
<div><br>
</div>
<div>take a look this screen:</div>
<div><a href="http://peter.kingofcoders.com/?p=779" target="_blank">http://peter.kingofcoders.com/?p=779</a></div>
<div><br>
</div>
<div><br>
<br>
<div>
<hr id="x_stopSpelling">
Date: Thu, 18 Jul 2013 00:15:52 -0400<br>
From: <a class="x_moz-txt-link-abbreviated" href="mailto:ayoung@redhat.com">ayoung@redhat.com</a><br>
To: <a class="x_moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">
openstack@lists.launchpad.net</a><br>
Subject: Re: [Openstack] can one user in multiple tenants?<br>
<br>
<div class="x_ecxmoz-cite-prefix">On 07/18/2013 12:12 AM, Peter Cheung wrote:<br>
</div>
<blockquote><style>
<!--
.x_ExternalClass .x_ecxhmmessage
{padding:0px}
.x_ExternalClass body.x_ecxhmmessage
{font-size:12pt;
font-family:Calibri}
-->
</style>
<div dir="ltr">Hi all
<div> 1) can one user in multiple tenants? I think yes, but when i "keystone user-get", i can see only one tenant field.
<br>
</div>
</div>
</blockquote>
User has a role assignemnt. The default role is Member, and they can have this role in multiple tenants. You are seeing the default tenant field.<br>
<br>
<blockquote>
<div dir="ltr">
<div> 2) how can i assign another tenant to a specific user? which command can do that?</div>
</div>
</blockquote>
keystone user-role-add <br>
<br>
<blockquote>
<div dir="ltr">
<div><br>
<br>
Thanks
<div>from Peter</div>
</div>
</div>
<br>
<fieldset class="x_ecxmimeAttachmentHeader"></fieldset> <br>
<pre>_______________________________________________
Mailing list: <a class="x_ecxmoz-txt-link-freetext" href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a>
Post to : <a class="x_ecxmoz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="x_ecxmoz-txt-link-freetext" href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a>
More help : <a class="x_ecxmoz-txt-link-freetext" href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a>
</pre>
</blockquote>
<br>
<br>
_______________________________________________ Mailing list: <a class="x_moz-txt-link-freetext" href="https://launchpad.net/~openstack">
https://launchpad.net/~openstack</a> Post to : <a class="x_moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">
openstack@lists.launchpad.net</a> Unsubscribe : <a class="x_moz-txt-link-freetext" href="https://launchpad.net/~openstack">
https://launchpad.net/~openstack</a> More help : <a class="x_moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">
https://help.launchpad.net/ListHelp</a></div>
</div>
</div>
</blockquote>
<br>
</div>
</body>
</html>