Learning OpenStack Networking - Third Edition

Creating a policy

Creating an RBAC policy requires the following four details:

• Policy type
• Target project
• Action to perform
• Resource

By default, the MySemiSharedNetwork network created in the last section is limited to the admin project that created it. Using the openstack client, create a new RBAC policy that shares the network with the ProjectA project by using the access_as_shared action, as shown here:

The access control policy can be viewed with the openstack network rbac list and/or show commands that can be seen here: