There is a plan to introduce a "project manager" role next year or so. See https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html (if you are in a hurry, scroll down to "phase 3"). -----Original Message----- From: Sean Mooney <smooney at redhat.com> Sent: Tuesday, May 23, 2023 9:31 PM To: wodel youchi <wodel.youchi at gmail.com>; OpenStack Discuss <openstack-discuss at lists.openstack.org> Subject: Re: Does Openstack have the notion of tenant admin? On Tue, 2023-05-23 at 13:19 +0100, wodel youchi wrote: > Hi, > > Does Openstack have the notion of tenant admin? no it does not. there is global admin or you can use member. > > If not, can a role be created to simulate such notion? not really you could use custom policy to simulate it but the real qustion you have to ask/answer is what woudl a teant admin be able to do that a project member cant. you woudl then need to create custom policy rules for all service to enable that persona and assocate that with a custom role. finally you would have to assging that role to the relevent tenant admins. > > Regards. > > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_ > campaign=sig-email&utm_content=webmail> > Virus-free.www.avast.com > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_ > campaign=sig-email&utm_content=webmail> > <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>