Managing groups and role assignments
Use groups and role assignments to grant permissions to multiple users in a domain. You can create, update, and delete groups; add users to groups or remove them; and assign roles to groups on domains or projects. To grant domain permissions such as domain_admin or image_upload to a group, create the group, list existing roles to find the required role IDs, assign each role to the group on the domain, and then assign the inherited role to projects owned by the domain if project inheritance is required.