osc identity group
Identity Group commands
A group is a collection of users. Each group is owned by a domain.
You can use groups to ease the task of managing role assignments for users. Assigning a role to a group on a project or domain is equivalent to assigning the role to each group member on that project or domain.
When you unassign a role from a group, that role is automatically unassigned from any user that is a member of the group. Any tokens that authenticates those users to the relevant project or domain are revoked.
As with users, a group without any role assignments is useless from the perspective of an OpenStack service and has no access to resources. However, a group without role assignments is permitted as a way of acquiring or loading users and groups from external sources before mapping them to projects and domains.
Usage: osc identity group <COMMAND>
Available subcommands:
osc identity group create— Create grouposc identity group delete— Delete grouposc identity group list— List groupsosc identity group set— Update grouposc identity group show— Show group detailsosc identity group user— Identity User User membership commands