I understand now, the tenant is keystone user-get is the default tenant ID. User can have many roles in different tenant.But we don't have a command to list out all roles among all tenant for a specific user. take a look this screen:http://peter.kingofcoders.com/?p=779 Date: Thu, 18 Jul 2013 00:15:52 -0400 From: ayoung at redhat.com To: openstack at lists.launchpad.net Subject: Re: [Openstack] can one user in multiple tenants? On 07/18/2013 12:12 AM, Peter Cheung wrote: Hi all 1) can one user in multiple tenants? I think yes, but when i "keystone user-get", i can see only one tenant field. User has a role assignemnt. The default role is Member, and they can have this role in multiple tenants. You are seeing the default tenant field. 2) how can i assign another tenant to a specific user? which command can do that? keystone user-role-add Thanks from Peter _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack at lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack at lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130718/07ef6b0a/attachment.html>