OpenStack Identity (keystone)

what is the difference between 'Domain', 'Group', 'Tenant' and 'Project'?

Asked by Lingxian Kong

In Grizzly~2, I found that in file 'keystone/identity/core.py', there are CRUD operations for 'Domain', 'Group', 'Tenant' and 'Project'.

What I want to known is that what's the difference between them?

Question information

Language:
English Edit question
Status:
Solved
For:
OpenStack Identity (keystone) Edit question
Assignee:
No assignee Edit question
Solved by:
gordon chung
Solved:
Last query:
Last reply:
Revision history for this message
Best gordon chung (chungg) said : 		#1

this link might help you - it is the v3 api: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md

in short:
Domain - represent a collection of both projects and users
Groups - represent a collection of Users and are owned by a specific domain
Tenants - is being renamed to Projects
Projects -represent the base unit of "ownership" in OpenStack

Revision history for this message
Lingxian Kong (kong) said : 		#2

Thanks gordon chung, that solved my question.