이 콘텐츠는 선택한 언어로 제공되지 않습니다.

Chapter 3. Group Management


3.1. Manage Keystone Groups

3.1.1. Using the Command-line

You can use Identity Service (keystone) groups to assign consistent permissions to multiple user accounts. This example creates a group and then assigns permissions to the group. As a result, members of the group will inherit the same permissions that were assigned to the group:

Note

The openstack group subcommands require keystone v3.

  1. Create the group grp-Auditors:

    $ openstack group create grp-Auditors
    +-------------+----------------------------------+
    | Field       | Value                            |
    +-------------+----------------------------------+
    | description |                                  |
    | domain_id   | default                          |
    | id          | 2a4856fc242142a4aa7c02d28edfdfff |
    | name        | grp-Auditors                     |
    +-------------+----------------------------------+
    Copy to Clipboard Toggle word wrap
  2. View a list of keystone groups:

    $ openstack group list --long
    +----------------------------------+--------------+-----------+-------------+
    | ID                               | Name         | Domain ID | Description |
    +----------------------------------+--------------+-----------+-------------+
    | 2a4856fc242142a4aa7c02d28edfdfff | grp-Auditors | default   |             |
    +----------------------------------+--------------+-----------+-------------+
    Copy to Clipboard Toggle word wrap
  3. Grant the grp-Auditors group permission to access the demo project, while using the _member_ role:

    $ openstack role add _member_ --group grp-Auditors --project demo
    Copy to Clipboard Toggle word wrap
  4. Add the existing user user1 to the grp-Auditors group:

    $ openstack group add user grp-Auditors user1
    user1 added to group grp-Auditors
    Copy to Clipboard Toggle word wrap
  5. Confirm that user1 is a member of grp-Auditors:

    $ openstack group contains user grp-Auditors user1
    user1 in group grp-Auditors
    Copy to Clipboard Toggle word wrap
  6. Review the effective permissions that have been assigned to user1:

    $ openstack role assignment list --effective --user user1
    +----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+
    | Role                             | User                             | Group | Project                          | Domain | Inherited |
    +----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+
    | 9fe2ff9ee4384b1894a90878d3e92bab | 3fefe5b4f6c948e6959d1feaef4822f2 |       | 0ce36252e2fb4ea8983bed2a568fa832 |        | False     |
    +----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+
    Copy to Clipboard Toggle word wrap

3.1.2. Using Dashboard

You can use the dashboard to manage the membership of keystone groups. You will need to use the command-line to assign role permissions to a group, as covered in the previous example.

3.1.2.1. Create a Group

  1. As an admin user in the dashboard, select Identity > Groups.
  2. Click +Create Group.
  3. Enter a name and description for the group.
  4. Click Create Group.

3.1.2.2. Manage Group Membership

You can use the dashboard to manage the membership of keystone groups.

  1. As an admin user in the dashboard, select Identity > Groups.
  2. Click Manage Members for the group you need to edit.
  3. Use Add users to add a user to the group. If you need to remove a user, mark its checkbox and click or Remove users.
맨 위로 이동
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2025 Red Hat