Event Details

This presentation covers the implementation of user access management for the AT&T Integrated Cloud (AT&T's Openstack infrastructure), as well as the need for Role Based Access Controls and the support of Openstack RBAC roles within user access management. For this talk, user access management refers to the context of managing the granting or removal of user access to Openstack resources by associating the user with an Openstack role(s) for a given tenant (or removing that role from the user).   The talk will discuss the characteristics, requirements, and architecture of a user access management system, including automated provisioning of access, support for approval authorization, auditing, and lifecycle support.   The talk will review the implementation of RBAC by Openstack services, how the Openstack data model impacts access management, and the tradeoff associated with the benefit of a new role and the impact of making local changes to Openstack roles and policies.