Identity v2, v3
Add role to a user or group in a project or domain
os role add
--domain <domain> | --project <project>
--user <user> | --group <group>
<role>
Include <domain> (name or ID)
New in version 3.
Include <project> (name or ID)
Include <user> (name or ID)
Include <group> (name or ID)
New in version 3.
Role to add to <project>:<user> (name or ID)
List roles
os role list
[--domain <domain> | --project <project]
[--user <user> | --group <group>]
Filter roles by <domain> (name or ID)
New in version 3.
Filter roles by <project> (name or ID)
New in version 3.
Filter roles by <user> (name or ID)
New in version 3.
Filter roles by <group> (name or ID)
New in version 3.
Remove role from domain/project : user/group
os role remove
[--domain <domain> | --project <project]
[--user <user> | --group <group>]
<role>
Include <domain> (name or ID)
New in version 3.
Include <project> (name or ID)
Include <user> (name or ID)
Include <group> (name or ID)
New in version 3.
Role to remove (name or ID)