summaryrefslogtreecommitdiff
path: root/doc/source/cli/command-objects/role-assignment.rst
blob: b29f32c690f0025a2bc99f8de4b3f2c399620c7e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
===============
role assignment
===============

Identity v2, v3

role assignment list
--------------------

List role assignments

.. program:: role assignment list
.. code:: bash

    openstack role assignment list
        [--role <role>]
        [--role-domain <role-domain>]
        [--user <user>]
        [--user-domain <user-domain>]
        [--group <group>]
        [--group-domain <group-domain>]
        [--domain <domain>]
        [--project <project>]
        [--project-domain <project-domain>]
        [--effective]
        [--inherited]
        [--names]

.. option:: --role <role>

    Role to filter (name or ID)

    .. versionadded:: 3

.. option:: --role-domain <role-domain>

    Domain the role belongs to (name or ID).
    This can be used in case collisions between role names exist.

    .. versionadded:: 3

.. option:: --user <user>

    User to filter (name or ID)

.. option:: --user-domain <user-domain>

    Domain the user belongs to (name or ID).
    This can be used in case collisions between user names exist.

    .. versionadded:: 3

.. option:: --group <group>

    Group to filter (name or ID)

    .. versionadded:: 3

.. option:: --group-domain <group-domain>

    Domain the group belongs to (name or ID).
    This can be used in case collisions between group names exist.

    .. versionadded:: 3

.. option:: --domain <domain>

    Domain to filter (name or ID)

    .. versionadded:: 3

.. option:: --project <project>

    Project to filter (name or ID)

.. option:: --project-domain <project-domain>

    Domain the project belongs to (name or ID).
    This can be used in case collisions between project names exist.

    .. versionadded:: 3

.. option:: --effective

    Returns only effective role assignments (defaults to False)

    .. versionadded:: 3

.. option:: --inherited

    Specifies if the role grant is inheritable to the sub projects

    .. versionadded:: 3

.. option:: --names

    Returns role assignments with names instead of IDs

.. option:: --auth-user

    Returns role assignments for the authenticated user.

.. option:: --auth-project

    Returns role assignments for the project to which the authenticated user
    is scoped.