Working with access control policies

The workflow for managing RBAC policies follows the standard Create, Read, Update, and Delete (CRUD) model that is used throughout the Neutron API. The OpenStack command-line interface can be used to manage access control policies. As of the Pike release of OpenStack, Horizon support for RBAC has not been implemented. However, resources shared via a policy can be utilized within the dashboard.

Managing access control policies in the CLI

From within the openstack command-line client, a number of commands can be used to manage access control policies. The primary commands associated with access control policy management that will be discussed in this chapter are listed in the following table:

Role-Based Access Control Commands	Description
network rbac create	Creates the network RBAC policy
network rbac delete	Deletes the network RBAC policy
network rbac list	Lists network RBAC policies
network rbac set	Sets network RBAC policy properties
network rbac show	Displays network...