As an OpenStack cloud administrator, you manage both projects and users, which can be managed independently from each other. Projects, also known as tenants or accounts, are organizational units in the cloud to which you can assign users. Users also have roles that determine their level of access to the project, and may have different roles in different projects. When the cloud is initially created, the operator defines at least one project, user, and role. As an administrator, you can create additional projects and users as needed. This section documents the following project and user administration tasks: Adding, updating, and deleting projects and users. Assigning users to one or more projects, and changing or removing the assignment. Enabling or temporarily disabling a project or user. You can also change quotas at the project level. For information, see .

Log in to the dashboard and choose the admin project from the CURRENT PROJECT drop-down list at the top of the screen. In the Admin tab, open the Identity Panel and click on Projects. Click Create Project. On the Project Info tab in the Create Project window, enter a name and description for the project. By default, the project is enabled. See . On the Project Members tab, add members to the project. On the Quota tab, edit quota values. For information about quotas, see . Click Create Project. The Projects list shows the project, including its assigned ID.

You can update a project to change its name or description, and enable or temporarily disable it. In the Admin tab, open the Identity Panel and click on Projects. Select the project that you want to update. In the More drop-down list, click Edit Project. In the Edit Project window, you can update a project to change its name or description, and enable or temporarily disable it. By default, the project is enabled. To temporarily disable it, clear the Enabled check box. To enable a disabled project, select the Enabled check box. Click Save.

When you disable a project, it has the following consequences: In the dashboard, users can no longer access the project from the CURRENT PROJECT drop-down list on the Project tab. Users who are members of only the disabled project can no longer log in. You cannot launch instances for a disabled project. Instances that are already running are not automatically terminated though—you must stop them manually. The data for a disabled project is maintained so that you can enable the project again at any time.

When you create users, you must assign them to a primary project as described in . You can assign users to additional projects or update and remove assignments. In the Admin tab, open the Identity Panel and click on Projects. Click the Modify Users button for the project that you want to modify. The Edit Project window shows the following lists of users: All Users. Users that are available to be assigned to the current project. Project Members. Users that are assigned to the current project.

To assign a user to the current project, click + for the user. The user moves from the All Users list to the Project Members list. To remove a user from the current project, click the - button for the user. The user moves from the Project Members list to the All Users list. Click Save.

On the Admin tab, click the Projects category. Select the projects that you want to delete. Click Delete Projects to confirm the deletion. You cannot undo the delete action.

When you create a user account, you must assign the account to a primary project. You also have the option of assigning the account to additional projects. Before you can delete a user account, you must remove the user account from its primary project. Log in to the dashboard and choose the admin project from the CURRENT PROJECT drop-down list at the top of the screen. In the Admin tab, open the Identity Panel and click on Users. Click Create User. In the Create User window, enter a user name, email, and preliminary password for the user. Confirm the password. Select a project from the Primary Project drop-down list. Choose a role for the user from the Role drop-down list. Default is Member. Click Create User to confirm your changes. Respond to the prompt to remember the password for the user. The dashboard assigns an ID to the user, and the user appears in the Users category.

When you disable a user account, the user can no longer log in. However, the data for the user is maintained so that you can enable the user again at any time. In the Admin tab, open the Identity Panel and click on Users. Locate the user that you want to disable or enable in the Users list. In the More drop-down list, select Disable User or Enable User. In the Enabled column, the enabled value updates to either True or False.

On the Admin tab, select the Users category. Select the users that you want to delete. Click Delete Users. In the Confirm Delete Users window, click Delete Users to confirm the deletion.