With user accounts in OpenStack you control who can log in to Horizon, the web interface of your OpenStack environment, and who has access to cloud resources. In addition, a user account also determines whether someone can authenticate via the OpenStack CLI and use Swift and S3 API access.
In this guide you’ll learn what an OpenStack user account is and how to create and delete user accounts in the TransIP control panel.
What is an OpenStack user?
An OpenStack user is an identity object in Keystone (the identity service of OpenStack) that is used to authenticate in Horizon or via the OpenStack API. Users receive permissions via roles (‘roles’) within one or more ‘projects’. This lets you define per project who is allowed to read, create or manage resources. A user without a role in a project has no access to that project.
Creating an OpenStack user
Step 1
Log in to the control panel and select ‘OpenStack’ in the left-hand menu. You will now see the project overview.
Step 2
Click the ‘Users’ tab at the top and then click the ‘Create new user’ button.
Step 3
Fill in the fields and click ‘Create’ to create the user:
- Username: login name for Horizon.
- Password: secure password for the user.
- Email address: for notifications and account management.
- Description (optional): short explanation or purpose.
Deleting an OpenStack user
Step 1
Log in to the control panel and select ‘OpenStack’ in the left-hand menu. You will now see the project overview.
Step 2
Click the ellipsis button (…) next to the OpenStack user to whom you want to grant access to the OpenStack project. In the menu that appears, choose ‘Delete’.
