Creating an RBAC policy requires the following four details:
- Policy type
- Target project
- Action to perform
- Resource
By default, the MySemiSharedNetwork network created in the last section is limited to the admin project that created it. Using the openstack client, create a new RBAC policy that shares the network with the ProjectA project by using the access_as_shared action, as shown here:
The access control policy can be viewed with the openstack network rbac list and/or show commands that can be seen here: