Identity v3
With application credentials, a user can grant their applications limited
access to their cloud resources. Once created, users can authenticate with an
application credential by using the v3applicationcredential
auth type.
Create new application credential
openstack application credential create
[--secret <secret>]
[--role <role>]
[--expiration <expiration>]
[--description <description>]
[--unrestricted]
[--restricted]
[--access-rules <access-rules>]
<name>
Secret to use for authentication (if not provided, one will be generated)
Roles to authorize (name or ID) (repeat option to set multiple values)
Sets an expiration date for the application credential, format of YYYY-mm-ddTHH:MM:SS (if not provided, the application credential will not expire)
Application credential description
Enable application credential to create and delete other application credentials and trusts (this is potentially dangerous behavior and is disabled by default)
Prohibit application credential from creating and deleting other application credentials and trusts (this is the default behavior)
Either a string or file path containing a JSON-formatted list of access rules, each containing a request method, path, and service, for example ‘[{“method”: “GET”, “path”: “/v2.1/servers”, “service”: “compute”}]’
Name of the application credential
Delete application credentials(s)
openstack application credential delete
<application-credential>
[<application-credential> ...]
Application credentials(s) to delete (name or ID)
List application credentials
openstack application credential list
[--format-config-file FORMAT_CONFIG]
[--sort-column SORT_COLUMN]
[--sort-ascending | --sort-descending]
[--user <user>]
[--user-domain <user-domain>]
Config file for the dict-to-csv formatter
specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated
sort the column(s) in ascending order
sort the column(s) in descending order
User whose application credentials to list (name or ID)
Domain the user belongs to (name or ID). This can be used in case collisions between user names exist.
Display application credential details
openstack application credential show <application-credential>
Application credential to display (name or ID)
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.