Red Hat Training

A Red Hat training course is available for Red Hat OpenStack Platform

3.7. Create the Services Tenant

Per tenant, quota controls can be used to limit the numbers of resources.


For more information about quotas, see the "Manage Projects" section in the Red Hat OpenStack Platform Administration Guide. This document is available from the following page:
Each user is assigned to a tenant. For regular users, the tenant typically represents their group, project, or organisation. For service users (the entity accessing the Identity service on behalf of the service), the tenant represents a service's geographical region. If the services in your environment are distributed, typically one service tenant is created for each endpoint on which services are running (excepting the Identity and dashboard services). If the services in your environment are deployed on a single node, only one service tenant is required, though it is possible to create more for administrative purposes.
The service setup examples in this guide assume that all services are deployed on one node, therefore only one service tenant is required. All such examples use the services tenant.


Because administrators, regular users, and service users all need a tenant, at least three tenants are typically created, one for each group. To create administrative and regular users and tenants, see Section 3.5, “Create an Administrator Account and the Identity Service Endpoint” and Section 3.6, “Create a Regular User Account”.

Procedure 3.11. Creating the Services Tenant

  1. Set up the shell to access keystone as the administrative user:
    # source ~/keystonerc_admin
  2. Create the services tenant:
    [(keystone_admin)]# openstack project create --description "Services Tenant" services   
    | Field       | Value                            |
    | description | Services Tenant                  |
    | enabled     | True                             |
    | id          | 42e1efb4bd5e49a49cb2b346078d6325 |
    | name        | services                         |


To obtain a list of all Identity service tenants and their IDs, run:
[(keystone_admin)]# openstack project list
| ID                               | Name     |
| 42e1efb4bd5e49a49cb2b346078d6325 | services |
| 65d8216d98c64399b8f44929b634bc3f | admin    |
| 99c674e3fead4237ace2a0d86dab76e4 | test     |