Administer user access

Manage user accounts to control who can access your cloud resources and ensure that only authorized individuals can interact with OpenStack services.

As an OpenStack administrator, you can add, modify, and delete users in the OpenStack Dashboard. Users can be members of one or more projects. You can manage projects and users independently from each other.

Create a user account in the dashboard
Copy link

Create user accounts in the dashboard to grant individuals the access and permissions they need to interact with cloud resources.

About this task
Copy link

You can assign a primary project and role to the user. Users that you create with OpenStack Dashboard (horizon) are Identity service (keystone) users by default. You can integrate Active Directory users by configuring the LDAP provider included with the Identity service.

Procedure
Copy link

  1. Log in to the Dashboard as an admin user.
  2. Select Identity > Users.
  3. Click Create User.
  4. Enter a user name, email, and preliminary password for the user.
  5. Select a project from the Primary Project list.
  6. Select a role for the user from the Role list. The default role is member.
  7. Click Create User.

Update user account details in the dashboard
Copy link

Edit user accounts in the dashboard to keep user information current and accurate, ensuring that project assignments and contact details reflect organizational changes.

About this task
Copy link

You can update user details, including the user name, email, and primary project.

Procedure
Copy link

  1. Log in to the OpenStack Dashboard as an admin user.
  2. Select Identity > Users.
  3. In the Actions column, click Edit.
  4. In the Update User window, you can update the User Name, Email, and Primary Project.
  5. Click Update User.

Suspend or reinstate user access in the dashboard
Copy link

Enable or disable user accounts in the dashboard to temporarily suspend or reinstate access without deleting the account, preserving user data and history for audit purposes.

About this task
Copy link

Note
This action is reversible, unlike deleting a user.
Limitations
  • You cannot disable or enable more than one user at a time.
  • You cannot set the primary project of a user to active.

A disabled user cannot:

  • Log in to the Dashboard.
  • Get access to OpenStack services.
  • Do any user-project action in the Dashboard.

Procedure
Copy link

  1. As an admin user in the Dashboard, select Identity > Users.
  2. In the Actions column, click the arrow, and select Enable User or Disable User. In the Enabled column, the value then updates to either True or False.

Delete a user in the dashboard
Copy link

Delete user accounts in the dashboard to permanently revoke system access and maintain a secure environment. You must have an administrative role to delete other users.

About this task
Copy link

Note
This action cannot be reversed.

Procedure
Copy link

  1. As an admin user in the OpenStack Dashboard, select Identity > Users.
  2. Select the users you want to delete.
  3. Click Delete Users. The Confirm Delete Users window is displayed.
  4. Click Delete Users to confirm the action.