per the admin guide[quote]
The admin role is global. If you assign a user to a project and give him the
admin role, the user can also add himself as an administrator for other
projects and thus gain full administrative rights across all projects.
[/quote]
how can I create admin user for a specific/single Project(OU) only ?
[QUOTE=sharfuddin;25156]per the admin guide
how can I create admin user for a specific/single Project(OU) only ?[/QUOTE]
What kind of rights should your admin user have on that project?
- that admin can create and delete users for his project(organization) only
- that admin can create/delete resources(e.g Images) and make them available/unavailable to users of his project(organization) only
I mean any possible administrative activity but on his own project only, rather a global admin.
The policy.json files configure access control, for the images, see http://docs.openstack.org/juno/config-reference/content/section_glance-policy.json.html. But I’m not aware how this can be limited to specific projects only.