It's showing the internal IDs of all the objects, which is really unhelpful. It would be much nicer if it showed the actual names of users, groups, projects and domains.
Example:
$ openstack role assignment list
+----------------------------------+----------------------------------+----------------------------------+----------------------------------+----------------------------------+
| Role | User | Group | Project | Domain |
+----------------------------------+----------------------------------+----------------------------------+----------------------------------+----------------------------------+
| 83e948848b7842c9a15e01cfd9db6e1e | 0fa9633d884a42448bbd386778ca6b87 | | 4404002027374bfe878501259b02a5d5 | |
| 83e948848b7842c9a15e01cfd9db6e1e | 0fa9633d884a42448bbd386778ca6b87 | | 5568fe0e2ca74a5aae35b01f035cdee8 | |
| f25338bd4a1f4d74927375507d555fa5 | 339e327397d4437d8d1123d63098de76 | | 67e30450f1c44010960aa7e1a457f9b3 | |
| ecea53c035034e93912428789e8272f6 | 35a3b6d9cb324661b5f144fd60a62964 | | 9b5b2ef803514898b4a3a90ef09dcf66 | |
| 83e948848b7842c9a15e01cfd9db6e1e | 4644b913eb77414db8f344d37e3da2c2 | | 9b5b2ef803514898b4a3a90ef09dcf66 | |
| ecea53c035034e93912428789e8272f6 | 50e99a8a5d6c40b2bd973fe55f2cb38b | | 9b5b2ef803514898b4a3a90ef09dcf66 | |
| f1f56af00ee942a5b24d73dbfe2364cb | 54b9ac936fd04293981b828580a9a3e1 | | 4404002027374bfe878501259b02a5d5 | |
| f25338bd4a1f4d74927375507d555fa5 | 54b9ac936fd04293981b828580a9a3e1 | | 4404002027374bfe878501259b02a5d5 | |
| f25338bd4a1f4d74927375507d555fa5 | 54b9ac936fd04293981b828580a9a3e1 | | c02e1e2d94584805a7445b6d31cab364 | |
| f25338bd4a1f4d74927375507d555fa5 | | 96a35e9d12544ee8aa3cfbf05f2fb649 | 4404002027374bfe878501259b02a5d5 | |
| f25338bd4a1f4d74927375507d555fa5 | 0fa9633d884a42448bbd386778ca6b87 | | | 88fc45635a134ef084866fe0fa94e7f3 |
+----------------------------------+----------------------------------+----------------------------------+----------------------------------+----------------------------------+
so, the only issue I can think of with this is how we can show the user's domain, group's domain and project's domain. since showing just the name wouldn't be enough, because there may be duplicates.
user | group | project | domain ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ----
-------
steve@d1 | | project@d1 |
steve@d2 | | project@d2 |
right now we don't have a set way of displaying this sort of information.
additionally, we would have to call GET /users/user_id and GET /project/project_id for each result, to get the name and owning domain. that would be very costly.
just my initial thoughts for now, maybe i'll think of a better solution later, but i agree that IDs are not really helpful.