Keystone Role Assignment Controller

[berendt]

What would you like to see implemented?

It should be possible to manage Role Assignments with ORC.

Additional information

No response

Link to reference documentation

No response

[mandre]

Agreed that the existing Role controller is not very useful in itself, without a way to assign roles to groups and users, on projects and domains.

Should it be a standalone controller? I don't know. Perhaps it would be easier if we added the role assignments to User and Group objects, similar to how we do volume attachments to servers. This needs to be discussed.

[berendt]

I'm not sure about that either. But I think that since there are separate controllers for groups, roles, users, domains, and projects, and you can assign roles everywhere, it's better to have a separate controller for this.