From aefddf3a90feb8b70ba2b70e3119e83a490b2d59 Mon Sep 17 00:00:00 2001
From: Lance Bragstad <lbragstad@gmail.com>
Date: Thu, 7 Jun 2018 15:57:39 +0000
Subject: [PATCH] Update role document to include system parameter

With the recent addition of system scope support in osc, we should
add system docs to the role documentation.

bp system-scope

Change-Id: Id77511c52ff0c36ea845e0f0fbbe3ec14818ee58
---
 doc/source/cli/command-objects/role.rst | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/doc/source/cli/command-objects/role.rst b/doc/source/cli/command-objects/role.rst
index fe3126c0f7..9819fd1231 100644
--- a/doc/source/cli/command-objects/role.rst
+++ b/doc/source/cli/command-objects/role.rst
@@ -13,12 +13,21 @@ Add role assignment to a user or group in a project or domain
 .. code:: bash
 
     openstack role add
-        --domain <domain> | --project <project> [--project-domain <project-domain>]
+        --system <system> | --domain <domain> | --project <project> [--project-domain <project-domain>]
         --user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
         --role-domain <role-domain>
         --inherited
         <role>
 
+.. option:: --system <system>
+
+    Include <system>
+
+    System or service to grant authorization to. Currently only ``all`` is
+    supported which encompasses the entire deployment system.
+
+    .. versionadded:: 3
+
 .. option:: --domain <domain>
 
     Include <domain> (name or ID)
@@ -210,12 +219,21 @@ Remove role assignment from domain/project : user/group
 .. code:: bash
 
     openstack role remove
-        --domain <domain> | --project <project> [--project-domain <project-domain>]
+        --system <system> | --domain <domain> | --project <project> [--project-domain <project-domain>]
         --user <user> [--user-domain <user-domain>] | --group <group> [--group-domain <group-domain>]
         --role-domain <role-domain>
         --inherited
         <role>
 
+.. option:: --system <system>
+
+    Include <system>
+
+    System or service to remove authorization from. Currently only ``all`` is
+    supported which encompasses the entire deployment system.
+
+    .. versionadded:: 3
+
 .. option:: --domain <domain>
 
     Include <domain> (name or ID)