3.7. Create a Regular User Account

Procedure 3.11. Creating a Regular User Account

1. Set up the shell to access keystone as the administrative user:

   # source ~/keystonerc_admin

   Copy to Clipboard Toggle word wrap
2. Create a tenant:

   [(keystone_admin)]# keystone tenant-create --name TENANT
   +-------------+----------------------------------+
   |   Property  |              Value               |
   +-------------+----------------------------------+
   | description |                                  |
   |   enabled   |              True                |
   |      id     | 6f8e3e36c4194b86b9a9b55d4b722af3 |
   |     name    |             TENANT               |
   +-------------+----------------------------------+

   Copy to Clipboard Toggle word wrap
   Replace TENANT with a name for the tenant.
3. Create a regular user:

   [(keystone_admin)]# keystone user-create --name USER --tenant TENANT --pass PASSWORD
   +----------+-----------------------------------+
   | Property |              Value                |
   +----------+-----------------------------------+
   |  email   |                                   |
   | enabled  |              True                 |
   |    id    | b8275d7494dd4c9cb3f69967a11f9765  |
   |   name   |              USER                 |
   | tenantId | 6f8e3e36c4194b86b9a9b55d4b722af3  |
   | username |              USER                 |
   +----------+-----------------------------------+

   Copy to Clipboard Toggle word wrap
   Replace USER with a user name for the account. Replace TENANT with the tenant name that you used in the previous step. Replace PASSWORD with a secure password for the account.

   Note

   The user is associated with Identity's default _member_ role automatically thanks to the --tenant option.
4. To facilitate authentication, create a keystonerc_user file in a secure location (for example, the home directory of the root user).
   Set the following environment variables to be used for authentication:

   export OS_USERNAME=USER
   export OS_TENANT_NAME=TENANT
   export OS_PASSWORD=PASSWORD
   export OS_AUTH_URL=http://IP:5000/v2.0/
   export PS1='[\u@\h \W(keystone_user)]\$ '

   Copy to Clipboard Toggle word wrap
   Replace USER, TENANT, and PASSWORD with the values specified during tenant and user creation. Replace IP with the IP address or host name of the Identity server.