{ "policies": [ { "name": "OpenStack RBAC Policy", "genre": "authz", "description": "A RBAC policy similar of what you can find through policy.json files", "model": { "name": "OPST_RBAC" }, "mandatory": true, "override": true } ], "models": [ { "name": "OPST_RBAC", "description": "", "meta_rules": [ { "name": "rbac" } ], "override": true } ], "subjects": [ { "name": "admin", "description": "", "extra": {}, "policies": [ { "name": "OpenStack RBAC Policy" } ] } ], "subject_categories": [ { "name": "role", "description": "a role in OpenStack" } ], "subject_data": [ { "name": "admin", "description": "the admin role", "policies": [], "category": { "name": "role" } }, { "name": "member", "description": "the member role", "policies": [], "category": { "name": "role" } } ], "subject_assignments": [ { "subject": { "name": "admin" }, "category": { "name": "role" }, "assignments": [ { "name": "admin" }, { "name": "member" } ] } ], "objects": [ { "name": "all_vm", "description": "", "extra": {}, "policies": [ { "name": "OpenStack RBAC Policy" } ] } ], "object_categories": [ { "name": "id", "description": "the UID of each virtual machine" } ], "object_data": [ { "name": "all_vm", "description": "represents all virtual machines in this project", "policies": [], "category": { "name": "id" } } ], "object_assignments": [ { "object": { "name": "all_vm" }, "category": { "name": "id" }, "assignments": [ { "name": "all_vm" } ] } ], "actions": [ { "name": "identity:get_region", "description": "identity:get_region action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_regions", "description": "identity:list_regions action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_region", "description": "identity:create_region action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_region", "description": "identity:update_region action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_region", "description": "identity:delete_region action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_service", "description": "identity:get_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_services", "description": "identity:list_services action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_service", "description": "identity:create_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_service", "description": "identity:update_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_service", "description": "identity:delete_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_endpoint", "description": "identity:get_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoints", "description": "identity:list_endpoints action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_endpoint", "description": "identity:create_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_endpoint", "description": "identity:update_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_endpoint", "description": "identity:delete_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_registered_limit", "description": "identity:get_registered_limit action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_registered_limits", "description": "identity:list_registered_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_registered_limits", "description": "identity:create_registered_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_registered_limits", "description": "identity:update_registered_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_registered_limit", "description": "identity:delete_registered_limit action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_limit", "description": "identity:get_limit action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_limits", "description": "identity:list_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_limits", "description": "identity:create_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_limits", "description": "identity:update_limits action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_limit", "description": "identity:delete_limit action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_domain", "description": "identity:get_domain action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_domains", "description": "identity:list_domains action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_domain", "description": "identity:create_domain action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_domain", "description": "identity:update_domain action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_domain", "description": "identity:delete_domain action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_target_project_domain_id", "description": "admin_and_matching_target_project_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_project_domain_id", "description": "admin_and_matching_project_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_project", "description": "identity:get_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_projects", "description": "identity:list_projects action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_user_projects", "description": "identity:list_user_projects action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_project", "description": "identity:create_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_project", "description": "identity:update_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_project", "description": "identity:delete_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_project_tag", "description": "identity:create_project_tag action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_project_tag", "description": "identity:delete_project_tag action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_project_tag", "description": "identity:get_project_tag action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_project_tags", "description": "identity:list_project_tags action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_project_tags", "description": "identity:delete_project_tags action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_project_tags", "description": "identity:update_project_tags action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_target_user_domain_id", "description": "admin_and_matching_target_user_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_user_domain_id", "description": "admin_and_matching_user_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_user", "description": "identity:get_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_users", "description": "identity:list_users action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_user", "description": "identity:create_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_user", "description": "identity:update_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_user", "description": "identity:delete_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_target_group_domain_id", "description": "admin_and_matching_target_group_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_group_domain_id", "description": "admin_and_matching_group_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_group", "description": "identity:get_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_groups", "description": "identity:list_groups action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_groups_for_user", "description": "identity:list_groups_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_group", "description": "identity:create_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_group", "description": "identity:update_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_group", "description": "identity:delete_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_users_in_group", "description": "identity:list_users_in_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:remove_user_from_group", "description": "identity:remove_user_from_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_user_in_group", "description": "identity:check_user_in_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:add_user_to_group", "description": "identity:add_user_to_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_credential", "description": "identity:get_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_credentials", "description": "identity:list_credentials action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_credential", "description": "identity:create_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_credential", "description": "identity:update_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_credential", "description": "identity:delete_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:ec2_get_credential", "description": "identity:ec2_get_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:ec2_list_credentials", "description": "identity:ec2_list_credentials action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:ec2_create_credential", "description": "identity:ec2_create_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:ec2_delete_credential", "description": "identity:ec2_delete_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_role", "description": "identity:get_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_roles", "description": "identity:list_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_role", "description": "identity:create_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_role", "description": "identity:update_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_role", "description": "identity:delete_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_domain_role", "description": "identity:get_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_domain_roles", "description": "identity:list_domain_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_domain_role", "description": "identity:create_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_domain_role", "description": "identity:update_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_domain_role", "description": "identity:delete_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_matches_domain_role", "description": "domain_admin_matches_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "get_domain_roles", "description": "get_domain_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_matches_target_domain_role", "description": "domain_admin_matches_target_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_matches_target_domain_role", "description": "project_admin_matches_target_domain_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "list_domain_roles", "description": "list_domain_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_matches_filter_on_list_domain_roles", "description": "domain_admin_matches_filter_on_list_domain_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_matches_filter_on_list_domain_roles", "description": "project_admin_matches_filter_on_list_domain_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_and_matching_prior_role_domain_id", "description": "admin_and_matching_prior_role_domain_id action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "implied_role_matches_prior_role_domain_or_global", "description": "implied_role_matches_prior_role_domain_or_global action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_implied_role", "description": "identity:get_implied_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_implied_roles", "description": "identity:list_implied_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_implied_role", "description": "identity:create_implied_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_implied_role", "description": "identity:delete_implied_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_role_inference_rules", "description": "identity:list_role_inference_rules action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_implied_role", "description": "identity:check_implied_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_system_grants_for_user", "description": "identity:list_system_grants_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_system_grant_for_user", "description": "identity:check_system_grant_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_system_grant_for_user", "description": "identity:create_system_grant_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:revoke_system_grant_for_user", "description": "identity:revoke_system_grant_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_system_grants_for_group", "description": "identity:list_system_grants_for_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_system_grant_for_group", "description": "identity:check_system_grant_for_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_system_grant_for_group", "description": "identity:create_system_grant_for_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:revoke_system_grant_for_group", "description": "identity:revoke_system_grant_for_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_grant", "description": "identity:check_grant action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_grants", "description": "identity:list_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_grant", "description": "identity:create_grant action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:revoke_grant", "description": "identity:revoke_grant action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_for_grants", "description": "domain_admin_for_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_for_global_role_grants", "description": "domain_admin_for_global_role_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_for_domain_role_grants", "description": "domain_admin_for_domain_role_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_grant_match", "description": "domain_admin_grant_match action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_for_grants", "description": "project_admin_for_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_for_global_role_grants", "description": "project_admin_for_global_role_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_for_domain_role_grants", "description": "project_admin_for_domain_role_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "domain_admin_for_list_grants", "description": "domain_admin_for_list_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "project_admin_for_list_grants", "description": "project_admin_for_list_grants action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_on_domain_filter", "description": "admin_on_domain_filter action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_on_project_filter", "description": "admin_on_project_filter action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "admin_on_domain_of_project_filter", "description": "admin_on_domain_of_project_filter action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_role_assignments", "description": "identity:list_role_assignments action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_role_assignments_for_tree", "description": "identity:list_role_assignments_for_tree action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_policy", "description": "identity:get_policy action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_policies", "description": "identity:list_policies action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_policy", "description": "identity:create_policy action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_policy", "description": "identity:update_policy action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_policy", "description": "identity:delete_policy action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_token", "description": "identity:check_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:validate_token", "description": "identity:validate_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:validate_token_head", "description": "identity:validate_token_head action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:revocation_list", "description": "identity:revocation_list action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:revoke_token", "description": "identity:revoke_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_trust", "description": "identity:create_trust action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_trusts", "description": "identity:list_trusts action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_roles_for_trust", "description": "identity:list_roles_for_trust action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_role_for_trust", "description": "identity:get_role_for_trust action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_trust", "description": "identity:delete_trust action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_trust", "description": "identity:get_trust action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_consumer", "description": "identity:create_consumer action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_consumer", "description": "identity:get_consumer action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_consumers", "description": "identity:list_consumers action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_consumer", "description": "identity:delete_consumer action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_consumer", "description": "identity:update_consumer action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:authorize_request_token", "description": "identity:authorize_request_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_access_token_roles", "description": "identity:list_access_token_roles action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_access_token_role", "description": "identity:get_access_token_role action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_access_tokens", "description": "identity:list_access_tokens action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_access_token", "description": "identity:get_access_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_access_token", "description": "identity:delete_access_token action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_projects_for_endpoint", "description": "identity:list_projects_for_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:add_endpoint_to_project", "description": "identity:add_endpoint_to_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_endpoint_in_project", "description": "identity:check_endpoint_in_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoints_for_project", "description": "identity:list_endpoints_for_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:remove_endpoint_from_project", "description": "identity:remove_endpoint_from_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_endpoint_group", "description": "identity:create_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoint_groups", "description": "identity:list_endpoint_groups action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_endpoint_group", "description": "identity:get_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_endpoint_group", "description": "identity:update_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_endpoint_group", "description": "identity:delete_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_projects_associated_with_endpoint_group", "description": "identity:list_projects_associated_with_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoints_associated_with_endpoint_group", "description": "identity:list_endpoints_associated_with_endpoint_group action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_endpoint_group_in_project", "description": "identity:get_endpoint_group_in_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoint_groups_for_project", "description": "identity:list_endpoint_groups_for_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:add_endpoint_group_to_project", "description": "identity:add_endpoint_group_to_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:remove_endpoint_group_from_project", "description": "identity:remove_endpoint_group_from_project action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_identity_provider", "description": "identity:create_identity_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_identity_providers", "description": "identity:list_identity_providers action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_identity_provider", "description": "identity:get_identity_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_identity_provider", "description": "identity:update_identity_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_identity_provider", "description": "identity:delete_identity_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_protocol", "description": "identity:create_protocol action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_protocol", "description": "identity:update_protocol action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_protocol", "description": "identity:get_protocol action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_protocols", "description": "identity:list_protocols action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_protocol", "description": "identity:delete_protocol action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_mapping", "description": "identity:create_mapping action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_mapping", "description": "identity:get_mapping action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_mappings", "description": "identity:list_mappings action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_mapping", "description": "identity:delete_mapping action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_mapping", "description": "identity:update_mapping action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_service_provider", "description": "identity:create_service_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_service_providers", "description": "identity:list_service_providers action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_service_provider", "description": "identity:get_service_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_service_provider", "description": "identity:update_service_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_service_provider", "description": "identity:delete_service_provider action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_auth_catalog", "description": "identity:get_auth_catalog action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_auth_projects", "description": "identity:get_auth_projects action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_auth_domains", "description": "identity:get_auth_domains action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_auth_system", "description": "identity:get_auth_system action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_projects_for_user", "description": "identity:list_projects_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_domains_for_user", "description": "identity:list_domains_for_user action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_revoke_events", "description": "identity:list_revoke_events action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_policy_association_for_endpoint", "description": "identity:create_policy_association_for_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_policy_association_for_endpoint", "description": "identity:check_policy_association_for_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_policy_association_for_endpoint", "description": "identity:delete_policy_association_for_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_policy_association_for_service", "description": "identity:create_policy_association_for_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_policy_association_for_service", "description": "identity:check_policy_association_for_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_policy_association_for_service", "description": "identity:delete_policy_association_for_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_policy_association_for_region_and_service", "description": "identity:create_policy_association_for_region_and_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:check_policy_association_for_region_and_service", "description": "identity:check_policy_association_for_region_and_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_policy_association_for_region_and_service", "description": "identity:delete_policy_association_for_region_and_service action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_policy_for_endpoint", "description": "identity:get_policy_for_endpoint action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_endpoints_for_policy", "description": "identity:list_endpoints_for_policy action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_domain_config", "description": "identity:create_domain_config action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_domain_config", "description": "identity:get_domain_config action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_security_compliance_domain_config", "description": "identity:get_security_compliance_domain_config action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:update_domain_config", "description": "identity:update_domain_config action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_domain_config", "description": "identity:delete_domain_config action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_domain_config_default", "description": "identity:get_domain_config_default action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:get_application_credential", "description": "identity:get_application_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:list_application_credentials", "description": "identity:list_application_credentials action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:create_application_credential", "description": "identity:create_application_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] }, { "name": "identity:delete_application_credential", "description": "identity:delete_application_credential action for keystone", "extra": { "component": "keystone" }, "policies": [] } ], "action_categories": [ { "name": "action_id", "description": "" } ], "action_data": [ { "name": "identity:get_region", "description": "identity:get_region action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_regions", "description": "identity:list_regions action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_region", "description": "identity:create_region action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_region", "description": "identity:update_region action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_region", "description": "identity:delete_region action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_service", "description": "identity:get_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_services", "description": "identity:list_services action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_service", "description": "identity:create_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_service", "description": "identity:update_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_service", "description": "identity:delete_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_endpoint", "description": "identity:get_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoints", "description": "identity:list_endpoints action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_endpoint", "description": "identity:create_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_endpoint", "description": "identity:update_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_endpoint", "description": "identity:delete_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_registered_limit", "description": "identity:get_registered_limit action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_registered_limits", "description": "identity:list_registered_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_registered_limits", "description": "identity:create_registered_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_registered_limits", "description": "identity:update_registered_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_registered_limit", "description": "identity:delete_registered_limit action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_limit", "description": "identity:get_limit action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_limits", "description": "identity:list_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_limits", "description": "identity:create_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_limits", "description": "identity:update_limits action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_limit", "description": "identity:delete_limit action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_domain", "description": "identity:get_domain action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_domains", "description": "identity:list_domains action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_domain", "description": "identity:create_domain action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_domain", "description": "identity:update_domain action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_domain", "description": "identity:delete_domain action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_target_project_domain_id", "description": "admin_and_matching_target_project_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_project_domain_id", "description": "admin_and_matching_project_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_project", "description": "identity:get_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_projects", "description": "identity:list_projects action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_user_projects", "description": "identity:list_user_projects action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_project", "description": "identity:create_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_project", "description": "identity:update_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_project", "description": "identity:delete_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_project_tag", "description": "identity:create_project_tag action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_project_tag", "description": "identity:delete_project_tag action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_project_tag", "description": "identity:get_project_tag action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_project_tags", "description": "identity:list_project_tags action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_project_tags", "description": "identity:delete_project_tags action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_project_tags", "description": "identity:update_project_tags action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_target_user_domain_id", "description": "admin_and_matching_target_user_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_user_domain_id", "description": "admin_and_matching_user_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_user", "description": "identity:get_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_users", "description": "identity:list_users action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_user", "description": "identity:create_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_user", "description": "identity:update_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_user", "description": "identity:delete_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_target_group_domain_id", "description": "admin_and_matching_target_group_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_group_domain_id", "description": "admin_and_matching_group_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_group", "description": "identity:get_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_groups", "description": "identity:list_groups action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_groups_for_user", "description": "identity:list_groups_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_group", "description": "identity:create_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_group", "description": "identity:update_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_group", "description": "identity:delete_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_users_in_group", "description": "identity:list_users_in_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:remove_user_from_group", "description": "identity:remove_user_from_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_user_in_group", "description": "identity:check_user_in_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:add_user_to_group", "description": "identity:add_user_to_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_credential", "description": "identity:get_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_credentials", "description": "identity:list_credentials action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_credential", "description": "identity:create_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_credential", "description": "identity:update_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_credential", "description": "identity:delete_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:ec2_get_credential", "description": "identity:ec2_get_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:ec2_list_credentials", "description": "identity:ec2_list_credentials action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:ec2_create_credential", "description": "identity:ec2_create_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:ec2_delete_credential", "description": "identity:ec2_delete_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_role", "description": "identity:get_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_roles", "description": "identity:list_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_role", "description": "identity:create_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_role", "description": "identity:update_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_role", "description": "identity:delete_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_domain_role", "description": "identity:get_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_domain_roles", "description": "identity:list_domain_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_domain_role", "description": "identity:create_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_domain_role", "description": "identity:update_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_domain_role", "description": "identity:delete_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_matches_domain_role", "description": "domain_admin_matches_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "get_domain_roles", "description": "get_domain_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_matches_target_domain_role", "description": "domain_admin_matches_target_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_matches_target_domain_role", "description": "project_admin_matches_target_domain_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "list_domain_roles", "description": "list_domain_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_matches_filter_on_list_domain_roles", "description": "domain_admin_matches_filter_on_list_domain_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_matches_filter_on_list_domain_roles", "description": "project_admin_matches_filter_on_list_domain_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_and_matching_prior_role_domain_id", "description": "admin_and_matching_prior_role_domain_id action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "implied_role_matches_prior_role_domain_or_global", "description": "implied_role_matches_prior_role_domain_or_global action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_implied_role", "description": "identity:get_implied_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_implied_roles", "description": "identity:list_implied_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_implied_role", "description": "identity:create_implied_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_implied_role", "description": "identity:delete_implied_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_role_inference_rules", "description": "identity:list_role_inference_rules action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_implied_role", "description": "identity:check_implied_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_system_grants_for_user", "description": "identity:list_system_grants_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_system_grant_for_user", "description": "identity:check_system_grant_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_system_grant_for_user", "description": "identity:create_system_grant_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:revoke_system_grant_for_user", "description": "identity:revoke_system_grant_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_system_grants_for_group", "description": "identity:list_system_grants_for_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_system_grant_for_group", "description": "identity:check_system_grant_for_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_system_grant_for_group", "description": "identity:create_system_grant_for_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:revoke_system_grant_for_group", "description": "identity:revoke_system_grant_for_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_grant", "description": "identity:check_grant action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_grants", "description": "identity:list_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_grant", "description": "identity:create_grant action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:revoke_grant", "description": "identity:revoke_grant action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_for_grants", "description": "domain_admin_for_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_for_global_role_grants", "description": "domain_admin_for_global_role_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_for_domain_role_grants", "description": "domain_admin_for_domain_role_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_grant_match", "description": "domain_admin_grant_match action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_for_grants", "description": "project_admin_for_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_for_global_role_grants", "description": "project_admin_for_global_role_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_for_domain_role_grants", "description": "project_admin_for_domain_role_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "domain_admin_for_list_grants", "description": "domain_admin_for_list_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "project_admin_for_list_grants", "description": "project_admin_for_list_grants action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_on_domain_filter", "description": "admin_on_domain_filter action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_on_project_filter", "description": "admin_on_project_filter action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "admin_on_domain_of_project_filter", "description": "admin_on_domain_of_project_filter action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_role_assignments", "description": "identity:list_role_assignments action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_role_assignments_for_tree", "description": "identity:list_role_assignments_for_tree action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_policy", "description": "identity:get_policy action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_policies", "description": "identity:list_policies action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_policy", "description": "identity:create_policy action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_policy", "description": "identity:update_policy action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_policy", "description": "identity:delete_policy action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_token", "description": "identity:check_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:validate_token", "description": "identity:validate_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:validate_token_head", "description": "identity:validate_token_head action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:revocation_list", "description": "identity:revocation_list action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:revoke_token", "description": "identity:revoke_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_trust", "description": "identity:create_trust action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_trusts", "description": "identity:list_trusts action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_roles_for_trust", "description": "identity:list_roles_for_trust action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_role_for_trust", "description": "identity:get_role_for_trust action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_trust", "description": "identity:delete_trust action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_trust", "description": "identity:get_trust action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_consumer", "description": "identity:create_consumer action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_consumer", "description": "identity:get_consumer action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_consumers", "description": "identity:list_consumers action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_consumer", "description": "identity:delete_consumer action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_consumer", "description": "identity:update_consumer action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:authorize_request_token", "description": "identity:authorize_request_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_access_token_roles", "description": "identity:list_access_token_roles action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_access_token_role", "description": "identity:get_access_token_role action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_access_tokens", "description": "identity:list_access_tokens action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_access_token", "description": "identity:get_access_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_access_token", "description": "identity:delete_access_token action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_projects_for_endpoint", "description": "identity:list_projects_for_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:add_endpoint_to_project", "description": "identity:add_endpoint_to_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_endpoint_in_project", "description": "identity:check_endpoint_in_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoints_for_project", "description": "identity:list_endpoints_for_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:remove_endpoint_from_project", "description": "identity:remove_endpoint_from_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_endpoint_group", "description": "identity:create_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoint_groups", "description": "identity:list_endpoint_groups action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_endpoint_group", "description": "identity:get_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_endpoint_group", "description": "identity:update_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_endpoint_group", "description": "identity:delete_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_projects_associated_with_endpoint_group", "description": "identity:list_projects_associated_with_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoints_associated_with_endpoint_group", "description": "identity:list_endpoints_associated_with_endpoint_group action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_endpoint_group_in_project", "description": "identity:get_endpoint_group_in_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoint_groups_for_project", "description": "identity:list_endpoint_groups_for_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:add_endpoint_group_to_project", "description": "identity:add_endpoint_group_to_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:remove_endpoint_group_from_project", "description": "identity:remove_endpoint_group_from_project action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_identity_provider", "description": "identity:create_identity_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_identity_providers", "description": "identity:list_identity_providers action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_identity_provider", "description": "identity:get_identity_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_identity_provider", "description": "identity:update_identity_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_identity_provider", "description": "identity:delete_identity_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_protocol", "description": "identity:create_protocol action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_protocol", "description": "identity:update_protocol action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_protocol", "description": "identity:get_protocol action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_protocols", "description": "identity:list_protocols action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_protocol", "description": "identity:delete_protocol action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_mapping", "description": "identity:create_mapping action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_mapping", "description": "identity:get_mapping action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_mappings", "description": "identity:list_mappings action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_mapping", "description": "identity:delete_mapping action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_mapping", "description": "identity:update_mapping action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_service_provider", "description": "identity:create_service_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_service_providers", "description": "identity:list_service_providers action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_service_provider", "description": "identity:get_service_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_service_provider", "description": "identity:update_service_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_service_provider", "description": "identity:delete_service_provider action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_auth_catalog", "description": "identity:get_auth_catalog action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_auth_projects", "description": "identity:get_auth_projects action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_auth_domains", "description": "identity:get_auth_domains action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_auth_system", "description": "identity:get_auth_system action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_projects_for_user", "description": "identity:list_projects_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_domains_for_user", "description": "identity:list_domains_for_user action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_revoke_events", "description": "identity:list_revoke_events action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_policy_association_for_endpoint", "description": "identity:create_policy_association_for_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_policy_association_for_endpoint", "description": "identity:check_policy_association_for_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_policy_association_for_endpoint", "description": "identity:delete_policy_association_for_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_policy_association_for_service", "description": "identity:create_policy_association_for_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_policy_association_for_service", "description": "identity:check_policy_association_for_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_policy_association_for_service", "description": "identity:delete_policy_association_for_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_policy_association_for_region_and_service", "description": "identity:create_policy_association_for_region_and_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:check_policy_association_for_region_and_service", "description": "identity:check_policy_association_for_region_and_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_policy_association_for_region_and_service", "description": "identity:delete_policy_association_for_region_and_service action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_policy_for_endpoint", "description": "identity:get_policy_for_endpoint action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_endpoints_for_policy", "description": "identity:list_endpoints_for_policy action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_domain_config", "description": "identity:create_domain_config action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_domain_config", "description": "identity:get_domain_config action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_security_compliance_domain_config", "description": "identity:get_security_compliance_domain_config action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:update_domain_config", "description": "identity:update_domain_config action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_domain_config", "description": "identity:delete_domain_config action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_domain_config_default", "description": "identity:get_domain_config_default action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:get_application_credential", "description": "identity:get_application_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:list_application_credentials", "description": "identity:list_application_credentials action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:create_application_credential", "description": "identity:create_application_credential action for keystone", "policies": [], "category": { "name": "action_id" } }, { "name": "identity:delete_application_credential", "description": "identity:delete_application_credential action for keystone", "policies": [], "category": { "name": "action_id" } } ], "action_assignments": [ { "action": { "name": "identity:get_region" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_region" } ] }, { "action": { "name": "identity:list_regions" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_regions" } ] }, { "action": { "name": "identity:create_region" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_region" } ] }, { "action": { "name": "identity:update_region" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_region" } ] }, { "action": { "name": "identity:delete_region" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_region" } ] }, { "action": { "name": "identity:get_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_service" } ] }, { "action": { "name": "identity:list_services" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_services" } ] }, { "action": { "name": "identity:create_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_service" } ] }, { "action": { "name": "identity:update_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_service" } ] }, { "action": { "name": "identity:delete_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_service" } ] }, { "action": { "name": "identity:get_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_endpoint" } ] }, { "action": { "name": "identity:list_endpoints" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoints" } ] }, { "action": { "name": "identity:create_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_endpoint" } ] }, { "action": { "name": "identity:update_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_endpoint" } ] }, { "action": { "name": "identity:delete_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_endpoint" } ] }, { "action": { "name": "identity:get_registered_limit" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_registered_limit" } ] }, { "action": { "name": "identity:list_registered_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_registered_limits" } ] }, { "action": { "name": "identity:create_registered_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_registered_limits" } ] }, { "action": { "name": "identity:update_registered_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_registered_limits" } ] }, { "action": { "name": "identity:delete_registered_limit" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_registered_limit" } ] }, { "action": { "name": "identity:get_limit" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_limit" } ] }, { "action": { "name": "identity:list_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_limits" } ] }, { "action": { "name": "identity:create_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_limits" } ] }, { "action": { "name": "identity:update_limits" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_limits" } ] }, { "action": { "name": "identity:delete_limit" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_limit" } ] }, { "action": { "name": "identity:get_domain" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_domain" } ] }, { "action": { "name": "identity:list_domains" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_domains" } ] }, { "action": { "name": "identity:create_domain" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_domain" } ] }, { "action": { "name": "identity:update_domain" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_domain" } ] }, { "action": { "name": "identity:delete_domain" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_domain" } ] }, { "action": { "name": "admin_and_matching_target_project_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_target_project_domain_id" } ] }, { "action": { "name": "admin_and_matching_project_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_project_domain_id" } ] }, { "action": { "name": "identity:get_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_project" } ] }, { "action": { "name": "identity:list_projects" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_projects" } ] }, { "action": { "name": "identity:list_user_projects" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_user_projects" } ] }, { "action": { "name": "identity:create_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_project" } ] }, { "action": { "name": "identity:update_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_project" } ] }, { "action": { "name": "identity:delete_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_project" } ] }, { "action": { "name": "identity:create_project_tag" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_project_tag" } ] }, { "action": { "name": "identity:delete_project_tag" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_project_tag" } ] }, { "action": { "name": "identity:get_project_tag" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_project_tag" } ] }, { "action": { "name": "identity:list_project_tags" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_project_tags" } ] }, { "action": { "name": "identity:delete_project_tags" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_project_tags" } ] }, { "action": { "name": "identity:update_project_tags" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_project_tags" } ] }, { "action": { "name": "admin_and_matching_target_user_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_target_user_domain_id" } ] }, { "action": { "name": "admin_and_matching_user_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_user_domain_id" } ] }, { "action": { "name": "identity:get_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_user" } ] }, { "action": { "name": "identity:list_users" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_users" } ] }, { "action": { "name": "identity:create_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_user" } ] }, { "action": { "name": "identity:update_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_user" } ] }, { "action": { "name": "identity:delete_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_user" } ] }, { "action": { "name": "admin_and_matching_target_group_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_target_group_domain_id" } ] }, { "action": { "name": "admin_and_matching_group_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_group_domain_id" } ] }, { "action": { "name": "identity:get_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_group" } ] }, { "action": { "name": "identity:list_groups" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_groups" } ] }, { "action": { "name": "identity:list_groups_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_groups_for_user" } ] }, { "action": { "name": "identity:create_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_group" } ] }, { "action": { "name": "identity:update_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_group" } ] }, { "action": { "name": "identity:delete_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_group" } ] }, { "action": { "name": "identity:list_users_in_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_users_in_group" } ] }, { "action": { "name": "identity:remove_user_from_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:remove_user_from_group" } ] }, { "action": { "name": "identity:check_user_in_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_user_in_group" } ] }, { "action": { "name": "identity:add_user_to_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:add_user_to_group" } ] }, { "action": { "name": "identity:get_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_credential" } ] }, { "action": { "name": "identity:list_credentials" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_credentials" } ] }, { "action": { "name": "identity:create_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_credential" } ] }, { "action": { "name": "identity:update_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_credential" } ] }, { "action": { "name": "identity:delete_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_credential" } ] }, { "action": { "name": "identity:ec2_get_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:ec2_get_credential" } ] }, { "action": { "name": "identity:ec2_list_credentials" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:ec2_list_credentials" } ] }, { "action": { "name": "identity:ec2_create_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:ec2_create_credential" } ] }, { "action": { "name": "identity:ec2_delete_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:ec2_delete_credential" } ] }, { "action": { "name": "identity:get_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_role" } ] }, { "action": { "name": "identity:list_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_roles" } ] }, { "action": { "name": "identity:create_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_role" } ] }, { "action": { "name": "identity:update_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_role" } ] }, { "action": { "name": "identity:delete_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_role" } ] }, { "action": { "name": "identity:get_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_domain_role" } ] }, { "action": { "name": "identity:list_domain_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_domain_roles" } ] }, { "action": { "name": "identity:create_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_domain_role" } ] }, { "action": { "name": "identity:update_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_domain_role" } ] }, { "action": { "name": "identity:delete_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_domain_role" } ] }, { "action": { "name": "domain_admin_matches_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_matches_domain_role" } ] }, { "action": { "name": "get_domain_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "get_domain_roles" } ] }, { "action": { "name": "domain_admin_matches_target_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_matches_target_domain_role" } ] }, { "action": { "name": "project_admin_matches_target_domain_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_matches_target_domain_role" } ] }, { "action": { "name": "list_domain_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "list_domain_roles" } ] }, { "action": { "name": "domain_admin_matches_filter_on_list_domain_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_matches_filter_on_list_domain_roles" } ] }, { "action": { "name": "project_admin_matches_filter_on_list_domain_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_matches_filter_on_list_domain_roles" } ] }, { "action": { "name": "admin_and_matching_prior_role_domain_id" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_and_matching_prior_role_domain_id" } ] }, { "action": { "name": "implied_role_matches_prior_role_domain_or_global" }, "category": { "name": "action_id" }, "assignments": [ { "name": "implied_role_matches_prior_role_domain_or_global" } ] }, { "action": { "name": "identity:get_implied_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_implied_role" } ] }, { "action": { "name": "identity:list_implied_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_implied_roles" } ] }, { "action": { "name": "identity:create_implied_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_implied_role" } ] }, { "action": { "name": "identity:delete_implied_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_implied_role" } ] }, { "action": { "name": "identity:list_role_inference_rules" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_role_inference_rules" } ] }, { "action": { "name": "identity:check_implied_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_implied_role" } ] }, { "action": { "name": "identity:list_system_grants_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_system_grants_for_user" } ] }, { "action": { "name": "identity:check_system_grant_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_system_grant_for_user" } ] }, { "action": { "name": "identity:create_system_grant_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_system_grant_for_user" } ] }, { "action": { "name": "identity:revoke_system_grant_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:revoke_system_grant_for_user" } ] }, { "action": { "name": "identity:list_system_grants_for_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_system_grants_for_group" } ] }, { "action": { "name": "identity:check_system_grant_for_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_system_grant_for_group" } ] }, { "action": { "name": "identity:create_system_grant_for_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_system_grant_for_group" } ] }, { "action": { "name": "identity:revoke_system_grant_for_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:revoke_system_grant_for_group" } ] }, { "action": { "name": "identity:check_grant" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_grant" } ] }, { "action": { "name": "identity:list_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_grants" } ] }, { "action": { "name": "identity:create_grant" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_grant" } ] }, { "action": { "name": "identity:revoke_grant" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:revoke_grant" } ] }, { "action": { "name": "domain_admin_for_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_for_grants" } ] }, { "action": { "name": "domain_admin_for_global_role_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_for_global_role_grants" } ] }, { "action": { "name": "domain_admin_for_domain_role_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_for_domain_role_grants" } ] }, { "action": { "name": "domain_admin_grant_match" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_grant_match" } ] }, { "action": { "name": "project_admin_for_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_for_grants" } ] }, { "action": { "name": "project_admin_for_global_role_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_for_global_role_grants" } ] }, { "action": { "name": "project_admin_for_domain_role_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_for_domain_role_grants" } ] }, { "action": { "name": "domain_admin_for_list_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "domain_admin_for_list_grants" } ] }, { "action": { "name": "project_admin_for_list_grants" }, "category": { "name": "action_id" }, "assignments": [ { "name": "project_admin_for_list_grants" } ] }, { "action": { "name": "admin_on_domain_filter" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_on_domain_filter" } ] }, { "action": { "name": "admin_on_project_filter" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_on_project_filter" } ] }, { "action": { "name": "admin_on_domain_of_project_filter" }, "category": { "name": "action_id" }, "assignments": [ { "name": "admin_on_domain_of_project_filter" } ] }, { "action": { "name": "identity:list_role_assignments" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_role_assignments" } ] }, { "action": { "name": "identity:list_role_assignments_for_tree" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_role_assignments_for_tree" } ] }, { "action": { "name": "identity:get_policy" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_policy" } ] }, { "action": { "name": "identity:list_policies" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_policies" } ] }, { "action": { "name": "identity:create_policy" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_policy" } ] }, { "action": { "name": "identity:update_policy" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_policy" } ] }, { "action": { "name": "identity:delete_policy" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_policy" } ] }, { "action": { "name": "identity:check_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_token" } ] }, { "action": { "name": "identity:validate_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:validate_token" } ] }, { "action": { "name": "identity:validate_token_head" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:validate_token_head" } ] }, { "action": { "name": "identity:revocation_list" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:revocation_list" } ] }, { "action": { "name": "identity:revoke_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:revoke_token" } ] }, { "action": { "name": "identity:create_trust" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_trust" } ] }, { "action": { "name": "identity:list_trusts" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_trusts" } ] }, { "action": { "name": "identity:list_roles_for_trust" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_roles_for_trust" } ] }, { "action": { "name": "identity:get_role_for_trust" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_role_for_trust" } ] }, { "action": { "name": "identity:delete_trust" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_trust" } ] }, { "action": { "name": "identity:get_trust" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_trust" } ] }, { "action": { "name": "identity:create_consumer" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_consumer" } ] }, { "action": { "name": "identity:get_consumer" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_consumer" } ] }, { "action": { "name": "identity:list_consumers" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_consumers" } ] }, { "action": { "name": "identity:delete_consumer" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_consumer" } ] }, { "action": { "name": "identity:update_consumer" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_consumer" } ] }, { "action": { "name": "identity:authorize_request_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:authorize_request_token" } ] }, { "action": { "name": "identity:list_access_token_roles" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_access_token_roles" } ] }, { "action": { "name": "identity:get_access_token_role" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_access_token_role" } ] }, { "action": { "name": "identity:list_access_tokens" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_access_tokens" } ] }, { "action": { "name": "identity:get_access_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_access_token" } ] }, { "action": { "name": "identity:delete_access_token" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_access_token" } ] }, { "action": { "name": "identity:list_projects_for_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_projects_for_endpoint" } ] }, { "action": { "name": "identity:add_endpoint_to_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:add_endpoint_to_project" } ] }, { "action": { "name": "identity:check_endpoint_in_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_endpoint_in_project" } ] }, { "action": { "name": "identity:list_endpoints_for_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoints_for_project" } ] }, { "action": { "name": "identity:remove_endpoint_from_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:remove_endpoint_from_project" } ] }, { "action": { "name": "identity:create_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_endpoint_group" } ] }, { "action": { "name": "identity:list_endpoint_groups" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoint_groups" } ] }, { "action": { "name": "identity:get_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_endpoint_group" } ] }, { "action": { "name": "identity:update_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_endpoint_group" } ] }, { "action": { "name": "identity:delete_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_endpoint_group" } ] }, { "action": { "name": "identity:list_projects_associated_with_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_projects_associated_with_endpoint_group" } ] }, { "action": { "name": "identity:list_endpoints_associated_with_endpoint_group" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoints_associated_with_endpoint_group" } ] }, { "action": { "name": "identity:get_endpoint_group_in_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_endpoint_group_in_project" } ] }, { "action": { "name": "identity:list_endpoint_groups_for_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoint_groups_for_project" } ] }, { "action": { "name": "identity:add_endpoint_group_to_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:add_endpoint_group_to_project" } ] }, { "action": { "name": "identity:remove_endpoint_group_from_project" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:remove_endpoint_group_from_project" } ] }, { "action": { "name": "identity:create_identity_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_identity_provider" } ] }, { "action": { "name": "identity:list_identity_providers" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_identity_providers" } ] }, { "action": { "name": "identity:get_identity_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_identity_provider" } ] }, { "action": { "name": "identity:update_identity_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_identity_provider" } ] }, { "action": { "name": "identity:delete_identity_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_identity_provider" } ] }, { "action": { "name": "identity:create_protocol" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_protocol" } ] }, { "action": { "name": "identity:update_protocol" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_protocol" } ] }, { "action": { "name": "identity:get_protocol" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_protocol" } ] }, { "action": { "name": "identity:list_protocols" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_protocols" } ] }, { "action": { "name": "identity:delete_protocol" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_protocol" } ] }, { "action": { "name": "identity:create_mapping" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_mapping" } ] }, { "action": { "name": "identity:get_mapping" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_mapping" } ] }, { "action": { "name": "identity:list_mappings" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_mappings" } ] }, { "action": { "name": "identity:delete_mapping" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_mapping" } ] }, { "action": { "name": "identity:update_mapping" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_mapping" } ] }, { "action": { "name": "identity:create_service_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_service_provider" } ] }, { "action": { "name": "identity:list_service_providers" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_service_providers" } ] }, { "action": { "name": "identity:get_service_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_service_provider" } ] }, { "action": { "name": "identity:update_service_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_service_provider" } ] }, { "action": { "name": "identity:delete_service_provider" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_service_provider" } ] }, { "action": { "name": "identity:get_auth_catalog" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_auth_catalog" } ] }, { "action": { "name": "identity:get_auth_projects" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_auth_projects" } ] }, { "action": { "name": "identity:get_auth_domains" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_auth_domains" } ] }, { "action": { "name": "identity:get_auth_system" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_auth_system" } ] }, { "action": { "name": "identity:list_projects_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_projects_for_user" } ] }, { "action": { "name": "identity:list_domains_for_user" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_domains_for_user" } ] }, { "action": { "name": "identity:list_revoke_events" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_revoke_events" } ] }, { "action": { "name": "identity:create_policy_association_for_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_policy_association_for_endpoint" } ] }, { "action": { "name": "identity:check_policy_association_for_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_policy_association_for_endpoint" } ] }, { "action": { "name": "identity:delete_policy_association_for_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_policy_association_for_endpoint" } ] }, { "action": { "name": "identity:create_policy_association_for_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_policy_association_for_service" } ] }, { "action": { "name": "identity:check_policy_association_for_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_policy_association_for_service" } ] }, { "action": { "name": "identity:delete_policy_association_for_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_policy_association_for_service" } ] }, { "action": { "name": "identity:create_policy_association_for_region_and_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_policy_association_for_region_and_service" } ] }, { "action": { "name": "identity:check_policy_association_for_region_and_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:check_policy_association_for_region_and_service" } ] }, { "action": { "name": "identity:delete_policy_association_for_region_and_service" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_policy_association_for_region_and_service" } ] }, { "action": { "name": "identity:get_policy_for_endpoint" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_policy_for_endpoint" } ] }, { "action": { "name": "identity:list_endpoints_for_policy" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_endpoints_for_policy" } ] }, { "action": { "name": "identity:create_domain_config" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_domain_config" } ] }, { "action": { "name": "identity:get_domain_config" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_domain_config" } ] }, { "action": { "name": "identity:get_security_compliance_domain_config" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_security_compliance_domain_config" } ] }, { "action": { "name": "identity:update_domain_config" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:update_domain_config" } ] }, { "action": { "name": "identity:delete_domain_config" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_domain_config" } ] }, { "action": { "name": "identity:get_domain_config_default" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_domain_config_default" } ] }, { "action": { "name": "identity:get_application_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:get_application_credential" } ] }, { "action": { "name": "identity:list_application_credentials" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:list_application_credentials" } ] }, { "action": { "name": "identity:create_application_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:create_application_credential" } ] }, { "action": { "name": "identity:delete_application_credential" }, "category": { "name": "action_id" }, "assignments": [ { "name": "identity:delete_application_credential" } ] } ], "meta_rules": [ { "name": "rbac", "description": "", "subject_categories": [ { "name": "role" } ], "object_categories": [ { "name": "id" } ], "action_categories": [ { "name": "action_id" } ] } ], "rules": [ { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_region" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_regions" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_region" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_region" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_region" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_services" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoints" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_registered_limit" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_registered_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_registered_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_registered_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_registered_limit" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_limit" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_limits" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_limit" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_domain" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_domains" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_domain" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_domain" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_domain" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_target_project_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_project_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_projects" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_user_projects" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_project_tag" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_project_tag" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_project_tag" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_project_tags" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_project_tags" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_project_tags" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_target_user_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_user_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_users" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_target_group_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_group_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_groups" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_groups_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_users_in_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:remove_user_from_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_user_in_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:add_user_to_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_credentials" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:ec2_get_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:ec2_list_credentials" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:ec2_create_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:ec2_delete_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_domain_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_matches_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "get_domain_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_matches_target_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_matches_target_domain_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "list_domain_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_matches_filter_on_list_domain_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_matches_filter_on_list_domain_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_and_matching_prior_role_domain_id" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "implied_role_matches_prior_role_domain_or_global" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_implied_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_implied_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_implied_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_implied_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_role_inference_rules" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_implied_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_system_grants_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_system_grant_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_system_grant_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:revoke_system_grant_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_system_grants_for_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_system_grant_for_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_system_grant_for_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:revoke_system_grant_for_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_grant" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_grant" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:revoke_grant" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_for_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_for_global_role_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_for_domain_role_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_grant_match" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_for_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_for_global_role_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_for_domain_role_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "domain_admin_for_list_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "project_admin_for_list_grants" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_on_domain_filter" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_on_project_filter" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "admin_on_domain_of_project_filter" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_role_assignments" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_role_assignments_for_tree" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_policy" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_policies" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_policy" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_policy" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_policy" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:validate_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:validate_token_head" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:revocation_list" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:revoke_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_trust" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_trusts" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_roles_for_trust" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_role_for_trust" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_trust" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_trust" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_consumer" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_consumer" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_consumers" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_consumer" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_consumer" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:authorize_request_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_access_token_roles" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_access_token_role" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_access_tokens" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_access_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_access_token" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_projects_for_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:add_endpoint_to_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_endpoint_in_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoints_for_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:remove_endpoint_from_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoint_groups" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_projects_associated_with_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoints_associated_with_endpoint_group" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_endpoint_group_in_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoint_groups_for_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:add_endpoint_group_to_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:remove_endpoint_group_from_project" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_identity_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_identity_providers" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_identity_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_identity_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_identity_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_protocol" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_protocol" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_protocol" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_protocols" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_protocol" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_mapping" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_mapping" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_mappings" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_mapping" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_mapping" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_service_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_service_providers" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_service_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_service_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_service_provider" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_auth_catalog" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_auth_projects" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_auth_domains" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_auth_system" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_projects_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_domains_for_user" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_revoke_events" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_policy_association_for_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_policy_association_for_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_policy_association_for_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_policy_association_for_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_policy_association_for_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_policy_association_for_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_policy_association_for_region_and_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:check_policy_association_for_region_and_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_policy_association_for_region_and_service" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_policy_for_endpoint" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_endpoints_for_policy" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_domain_config" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_domain_config" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_security_compliance_domain_config" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:update_domain_config" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_domain_config" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_domain_config_default" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:get_application_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:list_application_credentials" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:create_application_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true }, { "meta_rule": { "name": "rbac" }, "rule": { "subject_data": [ { "name": "admin" } ], "object_data": [ { "name": "all_vm" } ], "action_data": [ { "name": "identity:delete_application_credential" } ] }, "policy": { "name": "OpenStack RBAC Policy" }, "instructions": [ { "decision": "grant" } ], "enabled": true } ] }