Hi Derek, I think I understand - yes you can do that in horizon but you first need to "switch domain context" because default admin user is in domain "default". Now you can see the domains tab, you should see in there a button for setting the ldap context and then you can manage users like add to projects roles.

Kind regards,

Tony Pearce

On Fri, 11 Jun 2021 at 17:32, Derek O keeffe <derekokeeffe85@yahoo.ie> wrote:

Hi Tony,

Thanks for that, worked first time!!

Do you know if it's possible to allow the default domain admin edit the ldap members that are pulled into a domain? I can't seem to be able to see the users in that domain to change their roles through horizon. All works fine over cli. Thanks in advance.

Regards,
Derek

On Friday 11 June 2021, 10:24:37 IST, Tony Pearce <tonyppe@gmail.com> wrote:

Hi Derek,

I think that you need to give admin privilege to view the domain tab.

# see domain tab in admin user
openstack user list | grep admin
openstack role add --domain default --user [ID from previous command] admin

So in my case I have previously used:
openstack user list | grep admin
openstack role add --domain default --user beae2211cad94afc83173d730cce0c85 admin

kind regards,

On Fri, 11 Jun 2021 at 16:59, Derek O keeffe <derekokeeffe85@yahoo.ie> wrote:
Hi all,

I have two domains in my setup (default & ldap)

If I log in as default admin I cannot see a domain tab in the identity dropdown (all cli works fine). I'm sure I had it there before and think it could be a setting in /etc/opoenstack-dashboard/local_settings.py

Any pointers as to what I might be missing? Thanks in advance.

Regards,
Derek