Assigning inherited roles to groups on domains

PUT /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_projects

Assign an inherited role to a group on projects owned by a domain. The inherited role is applied to existing and future projects owned by the domain and does not appear as a role in a domain-scoped token.

Source: https://docs.openstack.org/api-ref/identity/v3/index.html?expanded=assign-role-to-group-on-projects-owned-by-a-domain-detail#assign-role-to-group-on-projects-owned-by-a-domain

Request

Parameters

Name	In	Type	Description
domain_id	path	string	The domain ID.
group_id	path	string	The group ID.
role_id	path	string	The role ID.

To find out role IDs, send a GET request to /v3/roles (refer to Listing roles).

Example

# curl -ks -X PUT -H 'Content-Type: application/json' -H 'X-Auth-Token: gAAAAA<...>' -d '{}' \
https://<node_IP_addr>:5000/v3/OS-INHERIT/domains/f2eeaaf15c254d4fa10255796122c8ec/\
groups/c0d675eac29945ad9dfd08aa1bb75751/roles/8b807cb2205441ea90312279bf4cb1c9/inherited_to_projects

Response

Status codes

Success

Code	Reason
204 - No Content	The server has fulfilled the request.