diff options
Diffstat (limited to 'moon_engine/tests/func_policies/opst_rbac_keystone.json')
| -rw-r--r-- | moon_engine/tests/func_policies/opst_rbac_keystone.json | 12998 |
1 files changed, 12998 insertions, 0 deletions
diff --git a/moon_engine/tests/func_policies/opst_rbac_keystone.json b/moon_engine/tests/func_policies/opst_rbac_keystone.json new file mode 100644 index 00000000..6ccf975f --- /dev/null +++ b/moon_engine/tests/func_policies/opst_rbac_keystone.json @@ -0,0 +1,12998 @@ +{ + "policies": [ + { + "name": "OpenStack RBAC Policy", + "genre": "authz", + "description": "A RBAC policy similar of what you can find through policy.json files", + "model": { + "name": "OPST_RBAC" + }, + "mandatory": true, + "override": true + } + ], + "models": [ + { + "name": "OPST_RBAC", + "description": "", + "meta_rules": [ + { + "name": "rbac" + } + ], + "override": true + } + ], + "subjects": [ + { + "name": "admin", + "description": "", + "extra": {}, + "policies": [ + { + "name": "OpenStack RBAC Policy" + } + ] + } + ], + "subject_categories": [ + { + "name": "role", + "description": "a role in OpenStack" + } + ], + "subject_data": [ + { + "name": "admin", + "description": "the admin role", + "policies": [], + "category": { + "name": "role" + } + }, + { + "name": "member", + "description": "the member role", + "policies": [], + "category": { + "name": "role" + } + } + ], + "subject_assignments": [ + { + "subject": { + "name": "admin" + }, + "category": { + "name": "role" + }, + "assignments": [ + { + "name": "admin" + }, + { + "name": "member" + } + ] + } + ], + "objects": [ + { + "name": "all_vm", + "description": "", + "extra": {}, + "policies": [ + { + "name": "OpenStack RBAC Policy" + } + ] + } + ], + "object_categories": [ + { + "name": "id", + "description": "the UID of each virtual machine" + } + ], + "object_data": [ + { + "name": "all_vm", + "description": "represents all virtual machines in this project", + "policies": [], + "category": { + "name": "id" + } + } + ], + "object_assignments": [ + { + "object": { + "name": "all_vm" + }, + "category": { + "name": "id" + }, + "assignments": [ + { + "name": "all_vm" + } + ] + } + ], + "actions": [ + { + "name": "identity:get_region", + "description": "identity:get_region action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_regions", + "description": "identity:list_regions action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_region", + "description": "identity:create_region action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_region", + "description": "identity:update_region action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_region", + "description": "identity:delete_region action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_service", + "description": "identity:get_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_services", + "description": "identity:list_services action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_service", + "description": "identity:create_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_service", + "description": "identity:update_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_service", + "description": "identity:delete_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_endpoint", + "description": "identity:get_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoints", + "description": "identity:list_endpoints action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_endpoint", + "description": "identity:create_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_endpoint", + "description": "identity:update_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_endpoint", + "description": "identity:delete_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_registered_limit", + "description": "identity:get_registered_limit action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_registered_limits", + "description": "identity:list_registered_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_registered_limits", + "description": "identity:create_registered_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_registered_limits", + "description": "identity:update_registered_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_registered_limit", + "description": "identity:delete_registered_limit action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_limit", + "description": "identity:get_limit action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_limits", + "description": "identity:list_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_limits", + "description": "identity:create_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_limits", + "description": "identity:update_limits action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_limit", + "description": "identity:delete_limit action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_domain", + "description": "identity:get_domain action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_domains", + "description": "identity:list_domains action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_domain", + "description": "identity:create_domain action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_domain", + "description": "identity:update_domain action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_domain", + "description": "identity:delete_domain action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_target_project_domain_id", + "description": "admin_and_matching_target_project_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_project_domain_id", + "description": "admin_and_matching_project_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_project", + "description": "identity:get_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_projects", + "description": "identity:list_projects action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_user_projects", + "description": "identity:list_user_projects action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_project", + "description": "identity:create_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_project", + "description": "identity:update_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_project", + "description": "identity:delete_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_project_tag", + "description": "identity:create_project_tag action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_project_tag", + "description": "identity:delete_project_tag action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_project_tag", + "description": "identity:get_project_tag action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_project_tags", + "description": "identity:list_project_tags action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_project_tags", + "description": "identity:delete_project_tags action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_project_tags", + "description": "identity:update_project_tags action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_target_user_domain_id", + "description": "admin_and_matching_target_user_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_user_domain_id", + "description": "admin_and_matching_user_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_user", + "description": "identity:get_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_users", + "description": "identity:list_users action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_user", + "description": "identity:create_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_user", + "description": "identity:update_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_user", + "description": "identity:delete_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_target_group_domain_id", + "description": "admin_and_matching_target_group_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_group_domain_id", + "description": "admin_and_matching_group_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_group", + "description": "identity:get_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_groups", + "description": "identity:list_groups action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_groups_for_user", + "description": "identity:list_groups_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_group", + "description": "identity:create_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_group", + "description": "identity:update_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_group", + "description": "identity:delete_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_users_in_group", + "description": "identity:list_users_in_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:remove_user_from_group", + "description": "identity:remove_user_from_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_user_in_group", + "description": "identity:check_user_in_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:add_user_to_group", + "description": "identity:add_user_to_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_credential", + "description": "identity:get_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_credentials", + "description": "identity:list_credentials action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_credential", + "description": "identity:create_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_credential", + "description": "identity:update_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_credential", + "description": "identity:delete_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:ec2_get_credential", + "description": "identity:ec2_get_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:ec2_list_credentials", + "description": "identity:ec2_list_credentials action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:ec2_create_credential", + "description": "identity:ec2_create_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:ec2_delete_credential", + "description": "identity:ec2_delete_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_role", + "description": "identity:get_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_roles", + "description": "identity:list_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_role", + "description": "identity:create_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_role", + "description": "identity:update_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_role", + "description": "identity:delete_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_domain_role", + "description": "identity:get_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_domain_roles", + "description": "identity:list_domain_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_domain_role", + "description": "identity:create_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_domain_role", + "description": "identity:update_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_domain_role", + "description": "identity:delete_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_matches_domain_role", + "description": "domain_admin_matches_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "get_domain_roles", + "description": "get_domain_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_matches_target_domain_role", + "description": "domain_admin_matches_target_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_matches_target_domain_role", + "description": "project_admin_matches_target_domain_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "list_domain_roles", + "description": "list_domain_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_matches_filter_on_list_domain_roles", + "description": "domain_admin_matches_filter_on_list_domain_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_matches_filter_on_list_domain_roles", + "description": "project_admin_matches_filter_on_list_domain_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_and_matching_prior_role_domain_id", + "description": "admin_and_matching_prior_role_domain_id action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "implied_role_matches_prior_role_domain_or_global", + "description": "implied_role_matches_prior_role_domain_or_global action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_implied_role", + "description": "identity:get_implied_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_implied_roles", + "description": "identity:list_implied_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_implied_role", + "description": "identity:create_implied_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_implied_role", + "description": "identity:delete_implied_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_role_inference_rules", + "description": "identity:list_role_inference_rules action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_implied_role", + "description": "identity:check_implied_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_system_grants_for_user", + "description": "identity:list_system_grants_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_system_grant_for_user", + "description": "identity:check_system_grant_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_system_grant_for_user", + "description": "identity:create_system_grant_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:revoke_system_grant_for_user", + "description": "identity:revoke_system_grant_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_system_grants_for_group", + "description": "identity:list_system_grants_for_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_system_grant_for_group", + "description": "identity:check_system_grant_for_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_system_grant_for_group", + "description": "identity:create_system_grant_for_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:revoke_system_grant_for_group", + "description": "identity:revoke_system_grant_for_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_grant", + "description": "identity:check_grant action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_grants", + "description": "identity:list_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_grant", + "description": "identity:create_grant action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:revoke_grant", + "description": "identity:revoke_grant action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_for_grants", + "description": "domain_admin_for_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_for_global_role_grants", + "description": "domain_admin_for_global_role_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_for_domain_role_grants", + "description": "domain_admin_for_domain_role_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_grant_match", + "description": "domain_admin_grant_match action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_for_grants", + "description": "project_admin_for_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_for_global_role_grants", + "description": "project_admin_for_global_role_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_for_domain_role_grants", + "description": "project_admin_for_domain_role_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "domain_admin_for_list_grants", + "description": "domain_admin_for_list_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "project_admin_for_list_grants", + "description": "project_admin_for_list_grants action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_on_domain_filter", + "description": "admin_on_domain_filter action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_on_project_filter", + "description": "admin_on_project_filter action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "admin_on_domain_of_project_filter", + "description": "admin_on_domain_of_project_filter action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_role_assignments", + "description": "identity:list_role_assignments action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_role_assignments_for_tree", + "description": "identity:list_role_assignments_for_tree action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_policy", + "description": "identity:get_policy action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_policies", + "description": "identity:list_policies action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_policy", + "description": "identity:create_policy action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_policy", + "description": "identity:update_policy action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_policy", + "description": "identity:delete_policy action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_token", + "description": "identity:check_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:validate_token", + "description": "identity:validate_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:validate_token_head", + "description": "identity:validate_token_head action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:revocation_list", + "description": "identity:revocation_list action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:revoke_token", + "description": "identity:revoke_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_trust", + "description": "identity:create_trust action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_trusts", + "description": "identity:list_trusts action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_roles_for_trust", + "description": "identity:list_roles_for_trust action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_role_for_trust", + "description": "identity:get_role_for_trust action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_trust", + "description": "identity:delete_trust action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_trust", + "description": "identity:get_trust action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_consumer", + "description": "identity:create_consumer action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_consumer", + "description": "identity:get_consumer action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_consumers", + "description": "identity:list_consumers action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_consumer", + "description": "identity:delete_consumer action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_consumer", + "description": "identity:update_consumer action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:authorize_request_token", + "description": "identity:authorize_request_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_access_token_roles", + "description": "identity:list_access_token_roles action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_access_token_role", + "description": "identity:get_access_token_role action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_access_tokens", + "description": "identity:list_access_tokens action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_access_token", + "description": "identity:get_access_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_access_token", + "description": "identity:delete_access_token action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_projects_for_endpoint", + "description": "identity:list_projects_for_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:add_endpoint_to_project", + "description": "identity:add_endpoint_to_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_endpoint_in_project", + "description": "identity:check_endpoint_in_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoints_for_project", + "description": "identity:list_endpoints_for_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:remove_endpoint_from_project", + "description": "identity:remove_endpoint_from_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_endpoint_group", + "description": "identity:create_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoint_groups", + "description": "identity:list_endpoint_groups action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_endpoint_group", + "description": "identity:get_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_endpoint_group", + "description": "identity:update_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_endpoint_group", + "description": "identity:delete_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_projects_associated_with_endpoint_group", + "description": "identity:list_projects_associated_with_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoints_associated_with_endpoint_group", + "description": "identity:list_endpoints_associated_with_endpoint_group action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_endpoint_group_in_project", + "description": "identity:get_endpoint_group_in_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoint_groups_for_project", + "description": "identity:list_endpoint_groups_for_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:add_endpoint_group_to_project", + "description": "identity:add_endpoint_group_to_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:remove_endpoint_group_from_project", + "description": "identity:remove_endpoint_group_from_project action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_identity_provider", + "description": "identity:create_identity_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_identity_providers", + "description": "identity:list_identity_providers action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_identity_provider", + "description": "identity:get_identity_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_identity_provider", + "description": "identity:update_identity_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_identity_provider", + "description": "identity:delete_identity_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_protocol", + "description": "identity:create_protocol action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_protocol", + "description": "identity:update_protocol action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_protocol", + "description": "identity:get_protocol action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_protocols", + "description": "identity:list_protocols action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_protocol", + "description": "identity:delete_protocol action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_mapping", + "description": "identity:create_mapping action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_mapping", + "description": "identity:get_mapping action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_mappings", + "description": "identity:list_mappings action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_mapping", + "description": "identity:delete_mapping action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_mapping", + "description": "identity:update_mapping action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_service_provider", + "description": "identity:create_service_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_service_providers", + "description": "identity:list_service_providers action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_service_provider", + "description": "identity:get_service_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_service_provider", + "description": "identity:update_service_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_service_provider", + "description": "identity:delete_service_provider action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_auth_catalog", + "description": "identity:get_auth_catalog action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_auth_projects", + "description": "identity:get_auth_projects action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_auth_domains", + "description": "identity:get_auth_domains action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_auth_system", + "description": "identity:get_auth_system action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_projects_for_user", + "description": "identity:list_projects_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_domains_for_user", + "description": "identity:list_domains_for_user action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_revoke_events", + "description": "identity:list_revoke_events action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_policy_association_for_endpoint", + "description": "identity:create_policy_association_for_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_policy_association_for_endpoint", + "description": "identity:check_policy_association_for_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_policy_association_for_endpoint", + "description": "identity:delete_policy_association_for_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_policy_association_for_service", + "description": "identity:create_policy_association_for_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_policy_association_for_service", + "description": "identity:check_policy_association_for_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_policy_association_for_service", + "description": "identity:delete_policy_association_for_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_policy_association_for_region_and_service", + "description": "identity:create_policy_association_for_region_and_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:check_policy_association_for_region_and_service", + "description": "identity:check_policy_association_for_region_and_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_policy_association_for_region_and_service", + "description": "identity:delete_policy_association_for_region_and_service action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_policy_for_endpoint", + "description": "identity:get_policy_for_endpoint action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_endpoints_for_policy", + "description": "identity:list_endpoints_for_policy action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_domain_config", + "description": "identity:create_domain_config action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_domain_config", + "description": "identity:get_domain_config action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_security_compliance_domain_config", + "description": "identity:get_security_compliance_domain_config action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:update_domain_config", + "description": "identity:update_domain_config action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_domain_config", + "description": "identity:delete_domain_config action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_domain_config_default", + "description": "identity:get_domain_config_default action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:get_application_credential", + "description": "identity:get_application_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:list_application_credentials", + "description": "identity:list_application_credentials action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:create_application_credential", + "description": "identity:create_application_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + }, + { + "name": "identity:delete_application_credential", + "description": "identity:delete_application_credential action for keystone", + "extra": { + "component": "keystone" + }, + "policies": [] + } + ], + "action_categories": [ + { + "name": "action_id", + "description": "" + } + ], + "action_data": [ + { + "name": "identity:get_region", + "description": "identity:get_region action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_regions", + "description": "identity:list_regions action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_region", + "description": "identity:create_region action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_region", + "description": "identity:update_region action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_region", + "description": "identity:delete_region action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_service", + "description": "identity:get_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_services", + "description": "identity:list_services action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_service", + "description": "identity:create_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_service", + "description": "identity:update_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_service", + "description": "identity:delete_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_endpoint", + "description": "identity:get_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoints", + "description": "identity:list_endpoints action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_endpoint", + "description": "identity:create_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_endpoint", + "description": "identity:update_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_endpoint", + "description": "identity:delete_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_registered_limit", + "description": "identity:get_registered_limit action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_registered_limits", + "description": "identity:list_registered_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_registered_limits", + "description": "identity:create_registered_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_registered_limits", + "description": "identity:update_registered_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_registered_limit", + "description": "identity:delete_registered_limit action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_limit", + "description": "identity:get_limit action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_limits", + "description": "identity:list_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_limits", + "description": "identity:create_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_limits", + "description": "identity:update_limits action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_limit", + "description": "identity:delete_limit action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_domain", + "description": "identity:get_domain action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_domains", + "description": "identity:list_domains action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_domain", + "description": "identity:create_domain action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_domain", + "description": "identity:update_domain action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_domain", + "description": "identity:delete_domain action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_target_project_domain_id", + "description": "admin_and_matching_target_project_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_project_domain_id", + "description": "admin_and_matching_project_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_project", + "description": "identity:get_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_projects", + "description": "identity:list_projects action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_user_projects", + "description": "identity:list_user_projects action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_project", + "description": "identity:create_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_project", + "description": "identity:update_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_project", + "description": "identity:delete_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_project_tag", + "description": "identity:create_project_tag action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_project_tag", + "description": "identity:delete_project_tag action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_project_tag", + "description": "identity:get_project_tag action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_project_tags", + "description": "identity:list_project_tags action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_project_tags", + "description": "identity:delete_project_tags action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_project_tags", + "description": "identity:update_project_tags action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_target_user_domain_id", + "description": "admin_and_matching_target_user_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_user_domain_id", + "description": "admin_and_matching_user_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_user", + "description": "identity:get_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_users", + "description": "identity:list_users action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_user", + "description": "identity:create_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_user", + "description": "identity:update_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_user", + "description": "identity:delete_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_target_group_domain_id", + "description": "admin_and_matching_target_group_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_group_domain_id", + "description": "admin_and_matching_group_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_group", + "description": "identity:get_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_groups", + "description": "identity:list_groups action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_groups_for_user", + "description": "identity:list_groups_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_group", + "description": "identity:create_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_group", + "description": "identity:update_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_group", + "description": "identity:delete_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_users_in_group", + "description": "identity:list_users_in_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:remove_user_from_group", + "description": "identity:remove_user_from_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_user_in_group", + "description": "identity:check_user_in_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:add_user_to_group", + "description": "identity:add_user_to_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_credential", + "description": "identity:get_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_credentials", + "description": "identity:list_credentials action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_credential", + "description": "identity:create_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_credential", + "description": "identity:update_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_credential", + "description": "identity:delete_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:ec2_get_credential", + "description": "identity:ec2_get_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:ec2_list_credentials", + "description": "identity:ec2_list_credentials action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:ec2_create_credential", + "description": "identity:ec2_create_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:ec2_delete_credential", + "description": "identity:ec2_delete_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_role", + "description": "identity:get_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_roles", + "description": "identity:list_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_role", + "description": "identity:create_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_role", + "description": "identity:update_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_role", + "description": "identity:delete_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_domain_role", + "description": "identity:get_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_domain_roles", + "description": "identity:list_domain_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_domain_role", + "description": "identity:create_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_domain_role", + "description": "identity:update_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_domain_role", + "description": "identity:delete_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_matches_domain_role", + "description": "domain_admin_matches_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "get_domain_roles", + "description": "get_domain_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_matches_target_domain_role", + "description": "domain_admin_matches_target_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_matches_target_domain_role", + "description": "project_admin_matches_target_domain_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "list_domain_roles", + "description": "list_domain_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_matches_filter_on_list_domain_roles", + "description": "domain_admin_matches_filter_on_list_domain_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_matches_filter_on_list_domain_roles", + "description": "project_admin_matches_filter_on_list_domain_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_and_matching_prior_role_domain_id", + "description": "admin_and_matching_prior_role_domain_id action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "implied_role_matches_prior_role_domain_or_global", + "description": "implied_role_matches_prior_role_domain_or_global action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_implied_role", + "description": "identity:get_implied_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_implied_roles", + "description": "identity:list_implied_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_implied_role", + "description": "identity:create_implied_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_implied_role", + "description": "identity:delete_implied_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_role_inference_rules", + "description": "identity:list_role_inference_rules action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_implied_role", + "description": "identity:check_implied_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_system_grants_for_user", + "description": "identity:list_system_grants_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_system_grant_for_user", + "description": "identity:check_system_grant_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_system_grant_for_user", + "description": "identity:create_system_grant_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:revoke_system_grant_for_user", + "description": "identity:revoke_system_grant_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_system_grants_for_group", + "description": "identity:list_system_grants_for_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_system_grant_for_group", + "description": "identity:check_system_grant_for_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_system_grant_for_group", + "description": "identity:create_system_grant_for_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:revoke_system_grant_for_group", + "description": "identity:revoke_system_grant_for_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_grant", + "description": "identity:check_grant action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_grants", + "description": "identity:list_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_grant", + "description": "identity:create_grant action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:revoke_grant", + "description": "identity:revoke_grant action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_for_grants", + "description": "domain_admin_for_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_for_global_role_grants", + "description": "domain_admin_for_global_role_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_for_domain_role_grants", + "description": "domain_admin_for_domain_role_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_grant_match", + "description": "domain_admin_grant_match action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_for_grants", + "description": "project_admin_for_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_for_global_role_grants", + "description": "project_admin_for_global_role_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_for_domain_role_grants", + "description": "project_admin_for_domain_role_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "domain_admin_for_list_grants", + "description": "domain_admin_for_list_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "project_admin_for_list_grants", + "description": "project_admin_for_list_grants action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_on_domain_filter", + "description": "admin_on_domain_filter action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_on_project_filter", + "description": "admin_on_project_filter action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "admin_on_domain_of_project_filter", + "description": "admin_on_domain_of_project_filter action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_role_assignments", + "description": "identity:list_role_assignments action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_role_assignments_for_tree", + "description": "identity:list_role_assignments_for_tree action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_policy", + "description": "identity:get_policy action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_policies", + "description": "identity:list_policies action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_policy", + "description": "identity:create_policy action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_policy", + "description": "identity:update_policy action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_policy", + "description": "identity:delete_policy action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_token", + "description": "identity:check_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:validate_token", + "description": "identity:validate_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:validate_token_head", + "description": "identity:validate_token_head action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:revocation_list", + "description": "identity:revocation_list action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:revoke_token", + "description": "identity:revoke_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_trust", + "description": "identity:create_trust action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_trusts", + "description": "identity:list_trusts action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_roles_for_trust", + "description": "identity:list_roles_for_trust action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_role_for_trust", + "description": "identity:get_role_for_trust action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_trust", + "description": "identity:delete_trust action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_trust", + "description": "identity:get_trust action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_consumer", + "description": "identity:create_consumer action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_consumer", + "description": "identity:get_consumer action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_consumers", + "description": "identity:list_consumers action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_consumer", + "description": "identity:delete_consumer action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_consumer", + "description": "identity:update_consumer action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:authorize_request_token", + "description": "identity:authorize_request_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_access_token_roles", + "description": "identity:list_access_token_roles action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_access_token_role", + "description": "identity:get_access_token_role action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_access_tokens", + "description": "identity:list_access_tokens action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_access_token", + "description": "identity:get_access_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_access_token", + "description": "identity:delete_access_token action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_projects_for_endpoint", + "description": "identity:list_projects_for_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:add_endpoint_to_project", + "description": "identity:add_endpoint_to_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_endpoint_in_project", + "description": "identity:check_endpoint_in_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoints_for_project", + "description": "identity:list_endpoints_for_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:remove_endpoint_from_project", + "description": "identity:remove_endpoint_from_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_endpoint_group", + "description": "identity:create_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoint_groups", + "description": "identity:list_endpoint_groups action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_endpoint_group", + "description": "identity:get_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_endpoint_group", + "description": "identity:update_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_endpoint_group", + "description": "identity:delete_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_projects_associated_with_endpoint_group", + "description": "identity:list_projects_associated_with_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoints_associated_with_endpoint_group", + "description": "identity:list_endpoints_associated_with_endpoint_group action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_endpoint_group_in_project", + "description": "identity:get_endpoint_group_in_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoint_groups_for_project", + "description": "identity:list_endpoint_groups_for_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:add_endpoint_group_to_project", + "description": "identity:add_endpoint_group_to_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:remove_endpoint_group_from_project", + "description": "identity:remove_endpoint_group_from_project action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_identity_provider", + "description": "identity:create_identity_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_identity_providers", + "description": "identity:list_identity_providers action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_identity_provider", + "description": "identity:get_identity_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_identity_provider", + "description": "identity:update_identity_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_identity_provider", + "description": "identity:delete_identity_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_protocol", + "description": "identity:create_protocol action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_protocol", + "description": "identity:update_protocol action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_protocol", + "description": "identity:get_protocol action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_protocols", + "description": "identity:list_protocols action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_protocol", + "description": "identity:delete_protocol action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_mapping", + "description": "identity:create_mapping action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_mapping", + "description": "identity:get_mapping action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_mappings", + "description": "identity:list_mappings action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_mapping", + "description": "identity:delete_mapping action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_mapping", + "description": "identity:update_mapping action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_service_provider", + "description": "identity:create_service_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_service_providers", + "description": "identity:list_service_providers action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_service_provider", + "description": "identity:get_service_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_service_provider", + "description": "identity:update_service_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_service_provider", + "description": "identity:delete_service_provider action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_auth_catalog", + "description": "identity:get_auth_catalog action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_auth_projects", + "description": "identity:get_auth_projects action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_auth_domains", + "description": "identity:get_auth_domains action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_auth_system", + "description": "identity:get_auth_system action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_projects_for_user", + "description": "identity:list_projects_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_domains_for_user", + "description": "identity:list_domains_for_user action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_revoke_events", + "description": "identity:list_revoke_events action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_policy_association_for_endpoint", + "description": "identity:create_policy_association_for_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_policy_association_for_endpoint", + "description": "identity:check_policy_association_for_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_policy_association_for_endpoint", + "description": "identity:delete_policy_association_for_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_policy_association_for_service", + "description": "identity:create_policy_association_for_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_policy_association_for_service", + "description": "identity:check_policy_association_for_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_policy_association_for_service", + "description": "identity:delete_policy_association_for_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_policy_association_for_region_and_service", + "description": "identity:create_policy_association_for_region_and_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:check_policy_association_for_region_and_service", + "description": "identity:check_policy_association_for_region_and_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_policy_association_for_region_and_service", + "description": "identity:delete_policy_association_for_region_and_service action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_policy_for_endpoint", + "description": "identity:get_policy_for_endpoint action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_endpoints_for_policy", + "description": "identity:list_endpoints_for_policy action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_domain_config", + "description": "identity:create_domain_config action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_domain_config", + "description": "identity:get_domain_config action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_security_compliance_domain_config", + "description": "identity:get_security_compliance_domain_config action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:update_domain_config", + "description": "identity:update_domain_config action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_domain_config", + "description": "identity:delete_domain_config action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_domain_config_default", + "description": "identity:get_domain_config_default action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:get_application_credential", + "description": "identity:get_application_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:list_application_credentials", + "description": "identity:list_application_credentials action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:create_application_credential", + "description": "identity:create_application_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + }, + { + "name": "identity:delete_application_credential", + "description": "identity:delete_application_credential action for keystone", + "policies": [], + "category": { + "name": "action_id" + } + } + ], + "action_assignments": [ + { + "action": { + "name": "identity:get_region" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_region" + } + ] + }, + { + "action": { + "name": "identity:list_regions" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_regions" + } + ] + }, + { + "action": { + "name": "identity:create_region" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_region" + } + ] + }, + { + "action": { + "name": "identity:update_region" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_region" + } + ] + }, + { + "action": { + "name": "identity:delete_region" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_region" + } + ] + }, + { + "action": { + "name": "identity:get_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_service" + } + ] + }, + { + "action": { + "name": "identity:list_services" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_services" + } + ] + }, + { + "action": { + "name": "identity:create_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_service" + } + ] + }, + { + "action": { + "name": "identity:update_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_service" + } + ] + }, + { + "action": { + "name": "identity:delete_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_service" + } + ] + }, + { + "action": { + "name": "identity:get_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_endpoint" + } + ] + }, + { + "action": { + "name": "identity:list_endpoints" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoints" + } + ] + }, + { + "action": { + "name": "identity:create_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_endpoint" + } + ] + }, + { + "action": { + "name": "identity:update_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_endpoint" + } + ] + }, + { + "action": { + "name": "identity:delete_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_endpoint" + } + ] + }, + { + "action": { + "name": "identity:get_registered_limit" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_registered_limit" + } + ] + }, + { + "action": { + "name": "identity:list_registered_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_registered_limits" + } + ] + }, + { + "action": { + "name": "identity:create_registered_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_registered_limits" + } + ] + }, + { + "action": { + "name": "identity:update_registered_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_registered_limits" + } + ] + }, + { + "action": { + "name": "identity:delete_registered_limit" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_registered_limit" + } + ] + }, + { + "action": { + "name": "identity:get_limit" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_limit" + } + ] + }, + { + "action": { + "name": "identity:list_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_limits" + } + ] + }, + { + "action": { + "name": "identity:create_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_limits" + } + ] + }, + { + "action": { + "name": "identity:update_limits" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_limits" + } + ] + }, + { + "action": { + "name": "identity:delete_limit" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_limit" + } + ] + }, + { + "action": { + "name": "identity:get_domain" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_domain" + } + ] + }, + { + "action": { + "name": "identity:list_domains" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_domains" + } + ] + }, + { + "action": { + "name": "identity:create_domain" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_domain" + } + ] + }, + { + "action": { + "name": "identity:update_domain" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_domain" + } + ] + }, + { + "action": { + "name": "identity:delete_domain" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_domain" + } + ] + }, + { + "action": { + "name": "admin_and_matching_target_project_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_target_project_domain_id" + } + ] + }, + { + "action": { + "name": "admin_and_matching_project_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_project_domain_id" + } + ] + }, + { + "action": { + "name": "identity:get_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_project" + } + ] + }, + { + "action": { + "name": "identity:list_projects" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_projects" + } + ] + }, + { + "action": { + "name": "identity:list_user_projects" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_user_projects" + } + ] + }, + { + "action": { + "name": "identity:create_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_project" + } + ] + }, + { + "action": { + "name": "identity:update_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_project" + } + ] + }, + { + "action": { + "name": "identity:delete_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_project" + } + ] + }, + { + "action": { + "name": "identity:create_project_tag" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_project_tag" + } + ] + }, + { + "action": { + "name": "identity:delete_project_tag" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_project_tag" + } + ] + }, + { + "action": { + "name": "identity:get_project_tag" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_project_tag" + } + ] + }, + { + "action": { + "name": "identity:list_project_tags" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_project_tags" + } + ] + }, + { + "action": { + "name": "identity:delete_project_tags" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_project_tags" + } + ] + }, + { + "action": { + "name": "identity:update_project_tags" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_project_tags" + } + ] + }, + { + "action": { + "name": "admin_and_matching_target_user_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_target_user_domain_id" + } + ] + }, + { + "action": { + "name": "admin_and_matching_user_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_user_domain_id" + } + ] + }, + { + "action": { + "name": "identity:get_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_user" + } + ] + }, + { + "action": { + "name": "identity:list_users" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_users" + } + ] + }, + { + "action": { + "name": "identity:create_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_user" + } + ] + }, + { + "action": { + "name": "identity:update_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_user" + } + ] + }, + { + "action": { + "name": "identity:delete_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_user" + } + ] + }, + { + "action": { + "name": "admin_and_matching_target_group_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_target_group_domain_id" + } + ] + }, + { + "action": { + "name": "admin_and_matching_group_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_group_domain_id" + } + ] + }, + { + "action": { + "name": "identity:get_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_group" + } + ] + }, + { + "action": { + "name": "identity:list_groups" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_groups" + } + ] + }, + { + "action": { + "name": "identity:list_groups_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_groups_for_user" + } + ] + }, + { + "action": { + "name": "identity:create_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_group" + } + ] + }, + { + "action": { + "name": "identity:update_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_group" + } + ] + }, + { + "action": { + "name": "identity:delete_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_group" + } + ] + }, + { + "action": { + "name": "identity:list_users_in_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_users_in_group" + } + ] + }, + { + "action": { + "name": "identity:remove_user_from_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:remove_user_from_group" + } + ] + }, + { + "action": { + "name": "identity:check_user_in_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_user_in_group" + } + ] + }, + { + "action": { + "name": "identity:add_user_to_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:add_user_to_group" + } + ] + }, + { + "action": { + "name": "identity:get_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_credential" + } + ] + }, + { + "action": { + "name": "identity:list_credentials" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_credentials" + } + ] + }, + { + "action": { + "name": "identity:create_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_credential" + } + ] + }, + { + "action": { + "name": "identity:update_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_credential" + } + ] + }, + { + "action": { + "name": "identity:delete_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_credential" + } + ] + }, + { + "action": { + "name": "identity:ec2_get_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:ec2_get_credential" + } + ] + }, + { + "action": { + "name": "identity:ec2_list_credentials" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:ec2_list_credentials" + } + ] + }, + { + "action": { + "name": "identity:ec2_create_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:ec2_create_credential" + } + ] + }, + { + "action": { + "name": "identity:ec2_delete_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:ec2_delete_credential" + } + ] + }, + { + "action": { + "name": "identity:get_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_role" + } + ] + }, + { + "action": { + "name": "identity:list_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_roles" + } + ] + }, + { + "action": { + "name": "identity:create_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_role" + } + ] + }, + { + "action": { + "name": "identity:update_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_role" + } + ] + }, + { + "action": { + "name": "identity:delete_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_role" + } + ] + }, + { + "action": { + "name": "identity:get_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_domain_role" + } + ] + }, + { + "action": { + "name": "identity:list_domain_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_domain_roles" + } + ] + }, + { + "action": { + "name": "identity:create_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_domain_role" + } + ] + }, + { + "action": { + "name": "identity:update_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_domain_role" + } + ] + }, + { + "action": { + "name": "identity:delete_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_domain_role" + } + ] + }, + { + "action": { + "name": "domain_admin_matches_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_matches_domain_role" + } + ] + }, + { + "action": { + "name": "get_domain_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "get_domain_roles" + } + ] + }, + { + "action": { + "name": "domain_admin_matches_target_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_matches_target_domain_role" + } + ] + }, + { + "action": { + "name": "project_admin_matches_target_domain_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_matches_target_domain_role" + } + ] + }, + { + "action": { + "name": "list_domain_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "list_domain_roles" + } + ] + }, + { + "action": { + "name": "domain_admin_matches_filter_on_list_domain_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_matches_filter_on_list_domain_roles" + } + ] + }, + { + "action": { + "name": "project_admin_matches_filter_on_list_domain_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_matches_filter_on_list_domain_roles" + } + ] + }, + { + "action": { + "name": "admin_and_matching_prior_role_domain_id" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_and_matching_prior_role_domain_id" + } + ] + }, + { + "action": { + "name": "implied_role_matches_prior_role_domain_or_global" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "implied_role_matches_prior_role_domain_or_global" + } + ] + }, + { + "action": { + "name": "identity:get_implied_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_implied_role" + } + ] + }, + { + "action": { + "name": "identity:list_implied_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_implied_roles" + } + ] + }, + { + "action": { + "name": "identity:create_implied_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_implied_role" + } + ] + }, + { + "action": { + "name": "identity:delete_implied_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_implied_role" + } + ] + }, + { + "action": { + "name": "identity:list_role_inference_rules" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_role_inference_rules" + } + ] + }, + { + "action": { + "name": "identity:check_implied_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_implied_role" + } + ] + }, + { + "action": { + "name": "identity:list_system_grants_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_system_grants_for_user" + } + ] + }, + { + "action": { + "name": "identity:check_system_grant_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_system_grant_for_user" + } + ] + }, + { + "action": { + "name": "identity:create_system_grant_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_system_grant_for_user" + } + ] + }, + { + "action": { + "name": "identity:revoke_system_grant_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:revoke_system_grant_for_user" + } + ] + }, + { + "action": { + "name": "identity:list_system_grants_for_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_system_grants_for_group" + } + ] + }, + { + "action": { + "name": "identity:check_system_grant_for_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_system_grant_for_group" + } + ] + }, + { + "action": { + "name": "identity:create_system_grant_for_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_system_grant_for_group" + } + ] + }, + { + "action": { + "name": "identity:revoke_system_grant_for_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:revoke_system_grant_for_group" + } + ] + }, + { + "action": { + "name": "identity:check_grant" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_grant" + } + ] + }, + { + "action": { + "name": "identity:list_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_grants" + } + ] + }, + { + "action": { + "name": "identity:create_grant" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_grant" + } + ] + }, + { + "action": { + "name": "identity:revoke_grant" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:revoke_grant" + } + ] + }, + { + "action": { + "name": "domain_admin_for_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_for_grants" + } + ] + }, + { + "action": { + "name": "domain_admin_for_global_role_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_for_global_role_grants" + } + ] + }, + { + "action": { + "name": "domain_admin_for_domain_role_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_for_domain_role_grants" + } + ] + }, + { + "action": { + "name": "domain_admin_grant_match" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_grant_match" + } + ] + }, + { + "action": { + "name": "project_admin_for_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_for_grants" + } + ] + }, + { + "action": { + "name": "project_admin_for_global_role_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_for_global_role_grants" + } + ] + }, + { + "action": { + "name": "project_admin_for_domain_role_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_for_domain_role_grants" + } + ] + }, + { + "action": { + "name": "domain_admin_for_list_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "domain_admin_for_list_grants" + } + ] + }, + { + "action": { + "name": "project_admin_for_list_grants" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "project_admin_for_list_grants" + } + ] + }, + { + "action": { + "name": "admin_on_domain_filter" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_on_domain_filter" + } + ] + }, + { + "action": { + "name": "admin_on_project_filter" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_on_project_filter" + } + ] + }, + { + "action": { + "name": "admin_on_domain_of_project_filter" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "admin_on_domain_of_project_filter" + } + ] + }, + { + "action": { + "name": "identity:list_role_assignments" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_role_assignments" + } + ] + }, + { + "action": { + "name": "identity:list_role_assignments_for_tree" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_role_assignments_for_tree" + } + ] + }, + { + "action": { + "name": "identity:get_policy" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_policy" + } + ] + }, + { + "action": { + "name": "identity:list_policies" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_policies" + } + ] + }, + { + "action": { + "name": "identity:create_policy" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_policy" + } + ] + }, + { + "action": { + "name": "identity:update_policy" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_policy" + } + ] + }, + { + "action": { + "name": "identity:delete_policy" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_policy" + } + ] + }, + { + "action": { + "name": "identity:check_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_token" + } + ] + }, + { + "action": { + "name": "identity:validate_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:validate_token" + } + ] + }, + { + "action": { + "name": "identity:validate_token_head" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:validate_token_head" + } + ] + }, + { + "action": { + "name": "identity:revocation_list" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:revocation_list" + } + ] + }, + { + "action": { + "name": "identity:revoke_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:revoke_token" + } + ] + }, + { + "action": { + "name": "identity:create_trust" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_trust" + } + ] + }, + { + "action": { + "name": "identity:list_trusts" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_trusts" + } + ] + }, + { + "action": { + "name": "identity:list_roles_for_trust" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_roles_for_trust" + } + ] + }, + { + "action": { + "name": "identity:get_role_for_trust" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_role_for_trust" + } + ] + }, + { + "action": { + "name": "identity:delete_trust" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_trust" + } + ] + }, + { + "action": { + "name": "identity:get_trust" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_trust" + } + ] + }, + { + "action": { + "name": "identity:create_consumer" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_consumer" + } + ] + }, + { + "action": { + "name": "identity:get_consumer" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_consumer" + } + ] + }, + { + "action": { + "name": "identity:list_consumers" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_consumers" + } + ] + }, + { + "action": { + "name": "identity:delete_consumer" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_consumer" + } + ] + }, + { + "action": { + "name": "identity:update_consumer" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_consumer" + } + ] + }, + { + "action": { + "name": "identity:authorize_request_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:authorize_request_token" + } + ] + }, + { + "action": { + "name": "identity:list_access_token_roles" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_access_token_roles" + } + ] + }, + { + "action": { + "name": "identity:get_access_token_role" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_access_token_role" + } + ] + }, + { + "action": { + "name": "identity:list_access_tokens" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_access_tokens" + } + ] + }, + { + "action": { + "name": "identity:get_access_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_access_token" + } + ] + }, + { + "action": { + "name": "identity:delete_access_token" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_access_token" + } + ] + }, + { + "action": { + "name": "identity:list_projects_for_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_projects_for_endpoint" + } + ] + }, + { + "action": { + "name": "identity:add_endpoint_to_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:add_endpoint_to_project" + } + ] + }, + { + "action": { + "name": "identity:check_endpoint_in_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_endpoint_in_project" + } + ] + }, + { + "action": { + "name": "identity:list_endpoints_for_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoints_for_project" + } + ] + }, + { + "action": { + "name": "identity:remove_endpoint_from_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:remove_endpoint_from_project" + } + ] + }, + { + "action": { + "name": "identity:create_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:list_endpoint_groups" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoint_groups" + } + ] + }, + { + "action": { + "name": "identity:get_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:update_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:delete_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:list_projects_associated_with_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_projects_associated_with_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:list_endpoints_associated_with_endpoint_group" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoints_associated_with_endpoint_group" + } + ] + }, + { + "action": { + "name": "identity:get_endpoint_group_in_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_endpoint_group_in_project" + } + ] + }, + { + "action": { + "name": "identity:list_endpoint_groups_for_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoint_groups_for_project" + } + ] + }, + { + "action": { + "name": "identity:add_endpoint_group_to_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:add_endpoint_group_to_project" + } + ] + }, + { + "action": { + "name": "identity:remove_endpoint_group_from_project" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:remove_endpoint_group_from_project" + } + ] + }, + { + "action": { + "name": "identity:create_identity_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_identity_provider" + } + ] + }, + { + "action": { + "name": "identity:list_identity_providers" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_identity_providers" + } + ] + }, + { + "action": { + "name": "identity:get_identity_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_identity_provider" + } + ] + }, + { + "action": { + "name": "identity:update_identity_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_identity_provider" + } + ] + }, + { + "action": { + "name": "identity:delete_identity_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_identity_provider" + } + ] + }, + { + "action": { + "name": "identity:create_protocol" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_protocol" + } + ] + }, + { + "action": { + "name": "identity:update_protocol" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_protocol" + } + ] + }, + { + "action": { + "name": "identity:get_protocol" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_protocol" + } + ] + }, + { + "action": { + "name": "identity:list_protocols" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_protocols" + } + ] + }, + { + "action": { + "name": "identity:delete_protocol" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_protocol" + } + ] + }, + { + "action": { + "name": "identity:create_mapping" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_mapping" + } + ] + }, + { + "action": { + "name": "identity:get_mapping" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_mapping" + } + ] + }, + { + "action": { + "name": "identity:list_mappings" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_mappings" + } + ] + }, + { + "action": { + "name": "identity:delete_mapping" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_mapping" + } + ] + }, + { + "action": { + "name": "identity:update_mapping" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_mapping" + } + ] + }, + { + "action": { + "name": "identity:create_service_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_service_provider" + } + ] + }, + { + "action": { + "name": "identity:list_service_providers" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_service_providers" + } + ] + }, + { + "action": { + "name": "identity:get_service_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_service_provider" + } + ] + }, + { + "action": { + "name": "identity:update_service_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_service_provider" + } + ] + }, + { + "action": { + "name": "identity:delete_service_provider" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_service_provider" + } + ] + }, + { + "action": { + "name": "identity:get_auth_catalog" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_auth_catalog" + } + ] + }, + { + "action": { + "name": "identity:get_auth_projects" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_auth_projects" + } + ] + }, + { + "action": { + "name": "identity:get_auth_domains" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_auth_domains" + } + ] + }, + { + "action": { + "name": "identity:get_auth_system" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_auth_system" + } + ] + }, + { + "action": { + "name": "identity:list_projects_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_projects_for_user" + } + ] + }, + { + "action": { + "name": "identity:list_domains_for_user" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_domains_for_user" + } + ] + }, + { + "action": { + "name": "identity:list_revoke_events" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_revoke_events" + } + ] + }, + { + "action": { + "name": "identity:create_policy_association_for_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_policy_association_for_endpoint" + } + ] + }, + { + "action": { + "name": "identity:check_policy_association_for_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_policy_association_for_endpoint" + } + ] + }, + { + "action": { + "name": "identity:delete_policy_association_for_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_policy_association_for_endpoint" + } + ] + }, + { + "action": { + "name": "identity:create_policy_association_for_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_policy_association_for_service" + } + ] + }, + { + "action": { + "name": "identity:check_policy_association_for_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_policy_association_for_service" + } + ] + }, + { + "action": { + "name": "identity:delete_policy_association_for_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_policy_association_for_service" + } + ] + }, + { + "action": { + "name": "identity:create_policy_association_for_region_and_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_policy_association_for_region_and_service" + } + ] + }, + { + "action": { + "name": "identity:check_policy_association_for_region_and_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:check_policy_association_for_region_and_service" + } + ] + }, + { + "action": { + "name": "identity:delete_policy_association_for_region_and_service" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_policy_association_for_region_and_service" + } + ] + }, + { + "action": { + "name": "identity:get_policy_for_endpoint" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_policy_for_endpoint" + } + ] + }, + { + "action": { + "name": "identity:list_endpoints_for_policy" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_endpoints_for_policy" + } + ] + }, + { + "action": { + "name": "identity:create_domain_config" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_domain_config" + } + ] + }, + { + "action": { + "name": "identity:get_domain_config" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_domain_config" + } + ] + }, + { + "action": { + "name": "identity:get_security_compliance_domain_config" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_security_compliance_domain_config" + } + ] + }, + { + "action": { + "name": "identity:update_domain_config" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:update_domain_config" + } + ] + }, + { + "action": { + "name": "identity:delete_domain_config" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_domain_config" + } + ] + }, + { + "action": { + "name": "identity:get_domain_config_default" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_domain_config_default" + } + ] + }, + { + "action": { + "name": "identity:get_application_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:get_application_credential" + } + ] + }, + { + "action": { + "name": "identity:list_application_credentials" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:list_application_credentials" + } + ] + }, + { + "action": { + "name": "identity:create_application_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:create_application_credential" + } + ] + }, + { + "action": { + "name": "identity:delete_application_credential" + }, + "category": { + "name": "action_id" + }, + "assignments": [ + { + "name": "identity:delete_application_credential" + } + ] + } + ], + "meta_rules": [ + { + "name": "rbac", + "description": "", + "subject_categories": [ + { + "name": "role" + } + ], + "object_categories": [ + { + "name": "id" + } + ], + "action_categories": [ + { + "name": "action_id" + } + ] + } + ], + "rules": [ + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_region" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_regions" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_region" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_region" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_region" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_services" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoints" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_registered_limit" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_registered_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_registered_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_registered_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_registered_limit" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_limit" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_limits" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_limit" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_domain" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_domains" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_domain" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_domain" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_domain" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_target_project_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_project_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_projects" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_user_projects" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_project_tag" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_project_tag" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_project_tag" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_project_tags" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_project_tags" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_project_tags" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_target_user_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_user_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_users" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_target_group_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_group_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_groups" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_groups_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_users_in_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:remove_user_from_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_user_in_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:add_user_to_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_credentials" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:ec2_get_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:ec2_list_credentials" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:ec2_create_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:ec2_delete_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_domain_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_matches_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "get_domain_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_matches_target_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_matches_target_domain_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "list_domain_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_matches_filter_on_list_domain_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_matches_filter_on_list_domain_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_and_matching_prior_role_domain_id" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "implied_role_matches_prior_role_domain_or_global" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_implied_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_implied_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_implied_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_implied_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_role_inference_rules" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_implied_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_system_grants_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_system_grant_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_system_grant_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:revoke_system_grant_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_system_grants_for_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_system_grant_for_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_system_grant_for_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:revoke_system_grant_for_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_grant" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_grant" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:revoke_grant" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_for_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_for_global_role_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_for_domain_role_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_grant_match" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_for_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_for_global_role_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_for_domain_role_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "domain_admin_for_list_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "project_admin_for_list_grants" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_on_domain_filter" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_on_project_filter" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "admin_on_domain_of_project_filter" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_role_assignments" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_role_assignments_for_tree" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_policy" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_policies" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_policy" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_policy" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_policy" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:validate_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:validate_token_head" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:revocation_list" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:revoke_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_trust" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_trusts" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_roles_for_trust" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_role_for_trust" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_trust" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_trust" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_consumer" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_consumer" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_consumers" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_consumer" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_consumer" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:authorize_request_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_access_token_roles" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_access_token_role" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_access_tokens" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_access_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_access_token" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_projects_for_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:add_endpoint_to_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_endpoint_in_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoints_for_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:remove_endpoint_from_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoint_groups" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_projects_associated_with_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoints_associated_with_endpoint_group" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_endpoint_group_in_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoint_groups_for_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:add_endpoint_group_to_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:remove_endpoint_group_from_project" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_identity_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_identity_providers" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_identity_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_identity_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_identity_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_protocol" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_protocol" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_protocol" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_protocols" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_protocol" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_mapping" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_mapping" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_mappings" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_mapping" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_mapping" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_service_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_service_providers" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_service_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_service_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_service_provider" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_auth_catalog" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_auth_projects" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_auth_domains" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_auth_system" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_projects_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_domains_for_user" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_revoke_events" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_policy_association_for_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_policy_association_for_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_policy_association_for_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_policy_association_for_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_policy_association_for_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_policy_association_for_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_policy_association_for_region_and_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:check_policy_association_for_region_and_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_policy_association_for_region_and_service" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_policy_for_endpoint" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_endpoints_for_policy" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_domain_config" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_domain_config" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_security_compliance_domain_config" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:update_domain_config" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_domain_config" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_domain_config_default" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:get_application_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:list_application_credentials" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:create_application_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + }, + { + "meta_rule": { + "name": "rbac" + }, + "rule": { + "subject_data": [ + { + "name": "admin" + } + ], + "object_data": [ + { + "name": "all_vm" + } + ], + "action_data": [ + { + "name": "identity:delete_application_credential" + } + ] + }, + "policy": { + "name": "OpenStack RBAC Policy" + }, + "instructions": [ + { + "decision": "grant" + } + ], + "enabled": true + } + ] +}
\ No newline at end of file |