role assignment

Identity v2, v3

role assignment list

List role assignments

os role assignment list
    [--role <role>]
    [--role-domain <role-domain>]
    [--user <user>]
    [--user-domain <user-domain>]
    [--group <group>]
    [--group-domain <group-domain>]
    [--domain <domain>]
    [--project <project>]
    [--project-domain <project-domain>]
    [--effective]
    [--inherited]
    [--names]

--role <role>

Role to filter (name or ID)

New in version 3.

--role-domain <role-domain>

Domain the role belongs to (name or ID). This can be used in case collisions between role names exist.

New in version 3.

--user <user>

User to filter (name or ID)

--user-domain <user-domain>

Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.

New in version 3.

--group <group>

Group to filter (name or ID)

New in version 3.

--group-domain <group-domain>

Domain the group belongs to (name or ID). This can be used in case collisions between group names exist.

New in version 3.

--domain <domain>

Domain to filter (name or ID)

New in version 3.

--project <project>

Project to filter (name or ID)

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

New in version 3.

--effective

Returns only effective role assignments (defaults to False)

New in version 3.

--inherited

Specifies if the role grant is inheritable to the sub projects

New in version 3.

--names

Returns role assignments with names instead of IDs

--auth-user

Returns role assignments for the authenticated user.

--auth-project

Returns role assignments for the project to which the authenticated user is scoped.