Identity v3 Commands¶
access rule¶
Access rules are fine-grained permissions for application credentials. An access rule comprises of a service type, a request path, and a request method. Access rules may only be created as attributes of application credentials, but they may be viewed and deleted independently.
access token¶
An access token is used by the Identity service’s OS-OAUTH1 extension. It is used by the consumer to request new Identity API tokens on behalf of the authorizing user.
application credential¶
With application credentials, a user can grant their applications limited
access to their cloud resources. Once created, users can authenticate with an
application credential by using the v3applicationcredential auth type.
catalog¶
A catalog lists OpenStack services that are available on the cloud.
consumer¶
An consumer is used by the Identity service’s OS-OAUTH1 extension. It is used to create a request token and access token.
credential¶
domain¶
A domain is a collection of users, groups, and projects. Each group and project is owned by exactly one domain.
ec2 credentials (Identity v3)¶
endpoint group¶
A endpoint group is used to create groups of endpoints that then can be used to filter the endpoints that are available to a project.
endpoint (Identity v3)¶
federation domain/project¶
federation protocol¶
A federation protocol is used by the Identity service’s OS-FEDERATION extension. It is used by identity providers and mappings.
group¶
identity provider¶
An identity provider is used by the Identity service’s OS-FEDERATION extension. It is used by federation protocols and mappings.
implied role¶
limit¶
Limits are used to specify project-specific limits thresholds of resources.
mapping¶
A mapping is used by the Identity service’s OS-FEDERATION extension. It is used by federation protocols and identity providers.
policy¶
A policy is an arbitrarily serialized policy engine rule set to be consumed by a remote service.
project (Identity v3)¶
region¶
A region is a general division of an OpenStack deployment. You can associate zero or more sub-regions with a region to create a tree-like structured hierarchy.
registered limit¶
Registered limits are used to define default limits for resources within a deployment.
request token¶
A request token is used by the Identity service’s OS-OAUTH1 extension. It is used by the consumer to request access tokens.
role assignment¶
role (Identity v3)¶
service provider¶
A service provider is used by the Identity service’s OS-FEDERATION extension. It is used by to register another OpenStack Identity service.
service (Identity v3)¶
token (Identity v3)¶
trust¶
A trust provide project-specific role delegation between users, with optional impersonation. Requires the OS-TRUST extension.
