Creating and assigning the quota manager role

Prerequisites

• To authorize further OpenStack commands, the OpenStack command-line client must be configured, as outlined in Connecting to OpenStack command-line interface.

To create a domain administrator that can manage projects

1. Create the quota_manager role:

   # openstack --insecure role create 'quota_manager'

2. Create a domain and a domain administrator by using the vinfra tool. For example:

   # vinfra domain create test
   # vinfra domain user create --domain test --domain-permissions domain_admin testuser

3. Assign the quota_manager role to the new user. For example:

   # openstack --insecure role add --user-domain test --user testuser --domain test quota_manager
   # openstack --insecure role add --user-domain test --user testuser --domain test quota_manager --inherited

4. Prepare an environment file for the new user. For example:

   # vi domain-admin.sh
   export OS_PROJECT_DOMAIN_NAME=test
   export OS_USER_DOMAIN_NAME=test
   export OS_DOMAIN_NAME=test
   export OS_USERNAME=testuser
   export OS_PASSWORD=1q2w3e
   export OS_AUTH_URL=https://127.0.0.1:5000/v3
   export OS_IDENTITY_API_VERSION=3
   export OS_AUTH_TYPE=password
   export OS_INSECURE=true
   export PYTHONWARNINGS="ignore:Unverified HTTPS request is being made"
   export NOVACLIENT_INSECURE=true
   export NEUTRONCLIENT_INSECURE=true
   export CINDERCLIENT_INSECURE=true
   export OS_PLACEMENT_API_VERSION=1.22