OpenStack Operations Guide
by Tom Fifield, Diane Fleming, Anne Gentle, Lorin Hochstein, Jonathan Proulx, Everett Toews, Joe Topjian
Chapter 9. Managing Projects and Users
An OpenStack cloud does not have much value without users. This chapter covers topics that relate to managing users, projects, and quotas. This chapter describes users and projects as described by version 2 of the OpenStack Identity API.
Warning
While version 3 of the Identity API is available, the client tools do not yet implement those calls, and most OpenStack clouds are still implementing Identity API v2.0.
Projects or Tenants?
In OpenStack user interfaces and documentation, a group of users is referred to as a project or tenant. These terms are interchangeable.
The initial implementation of the OpenStack Compute Service (nova)
had its own authentication system and used the term
project. When authentication moved into the OpenStack
Identity Service (keystone) project, it used the term
tenant to refer to a group of users. Because of this
legacy, some of the OpenStack tools refer to projects and some refer to
tenants.
Tip
This guide uses the term project, unless an
example shows interaction with a tool that uses the term
tenant.
Managing Projects
Users must be associated with at least one project, though they may belong to many. Therefore, you should add at least one project before adding users.
Adding Projects
To create a project through the OpenStack dashboard:
Log in as an administrative user.
Select the Admin tab in the left navigation bar.
Under Identity Panel, click Projects.
Click the Create Project button.
You are prompted for a project name and ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access