Explaining Keystone Domain, Project, Group, User and Role in a Single Image

1. Fig1
   • Each Domain is unique in OpenStack
   • Different Project can be mapped to one Domain, but cannot map to another Domain
2. Fig2
   • One User can be mapped to different Prject
   • One User have different role in different Project
3. Fig 3
   • Different User can map to one Group
   • One Group can be mapped to different Project
   • One Group can have different role to different Project
4. Fig 4
   • Domains have admin
   • Projects have admin
   • Group have admin
   • Group can have different admin to different Project