The keystoneclient.v3.roles Module

class keystoneclient.v3.roles.Role(manager, info, loaded=False)

Bases: keystoneclient.base.Resource

Represents an Identity role.

Attributes:
  • id: a uuid that identifies the role
  • name: user-facing identifier
class keystoneclient.v3.roles.RoleManager(api)

Bases: keystoneclient.base.CrudManager

Manager class for manipulating Identity roles.

check(role, user=None, group=None, domain=None, project=None)

Checks if a user or group has a role on a domain or project.

collection_key = 'roles'
create(name)
delete(role)
get(role)
grant(role, user=None, group=None, domain=None, project=None)

Grants a role to a user or group on a domain or project.

key = 'role'
list(user=None, group=None, domain=None, project=None)

Lists roles and role grants.

If no arguments are provided, all roles in the system will be listed.

If a user or group is specified, you must also specify either a domain or project to list role grants on that pair.

resource_class

alias of Role

revoke(role, user=None, group=None, domain=None, project=None)

Revokes a role from a user or group on a domain or project.

update(role, name=None)

Previous topic

The keystoneclient.v3.projects Module

Next topic

The keystoneclient.v3.services Module

This Page