Utilizing Role Base Access Control for managing Multi-tenancy

[Adam Young]

After creating a new project and allocating some amount of resources, we should be able to create a hierarchy of users like Project Manager (PM) having complete view of the project usage, then PM should be able to allocate resources to different sub-teams (like Dev, QA, Prod, etc), each sub-team leads having access to their allocated resources and able to manage the resources at their level with approval from the PM. All the users will be AD authenticated ones.

[navdeep (navdeepniku)]

I'm trying to do similar thing for my project. Hoping to resolve in future versions of Openstack.

[Dolph Mathews (dolph)]

I'm leaving this as incomplete, because it's not clear what part of this use case is missing / broken in keystone, and it's obviously spec-level work anyway. I'd suggest proposing a well-defined problem description to the spec backlog.

[Launchpad Janitor (janitor)]

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]