Default domain roles
Currently, there doesn't appear to be a default set of roles for domains. A default set would be helpful in terms of standardization.
Suggestions for domain roles:
- domain_admin (Domain Admin)
- domain_member (Domain Member)
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Daniel Park
- Direction:
- Needs approval
- Assignee:
- None
- Definition:
- Superseded
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
- Lance Bragstad
Related branches
Related bugs
Sprints
Whiteboard
We typically use specifications to detail work like this. Please see the repository for more information on specs and how to propose them [0]. Or feel free to come find me in #openstack-
[0] https:/
(lbragstad) 19-02-13: This is very similar to the default roles work initially implemented in Rocky [0] and continued in Stein [1][2]. While keystone doesn't automatically give users default roles on domains in the deployment, it does define a set of default roles and incorporates those defaults into policies.
[0] https:/
[1] https:/
[2] https:/
