So the v2 API is really a hang over from when creating a user with a default project automatically granted you a role on that project, leading to the concept of "user for a project". In v3 such an automatic assignment does not occur, and in v3 we focus much more on the direct assignments (i.e. user/group on project/domain).
In v3 we have the (much more comprehensive) GET /role_assignments API, which allows you to list assignments filtered by various attributes, for example: GET /role_assignments?scope.project_id=MyProject will list you all the assignments on a given project. Further, if you want to take into account group and inherited assignments, you can issue an API like: GET /role_assignments?scope.project_id=MyProject?effective See the Identity v3 API for more info: https://github.com/openstack /keystone-specs/blob/master/api/v3/identity-api-v3.rst ** Changed in: keystone Status: New => Won't Fix ** Changed in: keystone Status: Won't Fix => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1558350 Title: No rest api for /v3/projects/{projectId}/users Status in OpenStack Identity (keystone): Invalid Bug description: I want to list users in a specified project using admin token, however I find there is no rest api for /v3/projects/{projectId}/users, it is really useful. I notice there is /v2/tenants/{tenantId}/users for this purpose. Is there any reason that it is removed from v3? Thanks! To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1558350/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
