Migrating users

openstack-migrate can migrate Keystone users along with the corresponding domain, project and roles.

In multi-tenant mode, identity resources will be migrated as dependencies of other Openstack resources (e.g. instances, volumes, networks, etc).

Note that the user password cannot be preserved and will need to be reset on the destination cloud.

Example

The following example migrates an user and all the dependent resources:

openstack-migrate start \
  --resource-type=user \
  --include-dependencies \
  3ac5f091c2ee46e7aaee3ecd74a8c704

2025-12-18 15:02:12,285 INFO Initiating user migration, resource id: 3ac5f091c2ee46e7aaee3ecd74a8c704
2025-12-18 15:02:13,234 INFO Migrating associated domain resource: 9443251d042a4fba995ff0293a82acfa
2025-12-18 15:02:13,235 INFO Initiating domain migration, resource id: 9443251d042a4fba995ff0293a82acfa
2025-12-18 15:02:15,029 INFO Successfully migrated domain resource, destination id: a512bf1f391b4c9cab24047c1aa0c41e
2025-12-18 14:58:53,614 INFO Migrating associated project resource: 96f865b917074c49b8c20378fddce79d
2025-12-18 14:58:53,615 INFO Initiating project migration, resource id: 96f865b917074c49b8c20378fddce79d
2025-12-18 14:58:56,032 INFO Successfully migrated project resource, destination id: 82c74fbf994d418785693613b12d9855
2025-12-18 14:58:57,220 INFO Migrating associated role resource: 5bf07c37d906408aaaf7f9ab695f3b8e
2025-12-18 14:58:57,222 INFO Initiating role migration, resource id: 5bf07c37d906408aaaf7f9ab695f3b8e
2025-12-18 14:58:59,654 INFO Successfully migrated role resource, destination id: ffe6794e39904fa6952b0ea613a4d6a9
2025-12-18 14:58:59,668 INFO Migrating associated role resource: 4f254f35c43c45fda5f09874b742d1aa
2025-12-18 14:58:59,668 INFO Initiating role migration, resource id: 4f254f35c43c45fda5f09874b742d1aa
2025-12-18 14:59:02,843 INFO Successfully migrated role resource, destination id: 8d1af15bb8e04166b15ba9ff2d77644e
2025-12-18 14:59:05,845 INFO Recreated project role assignment: user 961b6ff0ed1e44e8beba4cf8b73a0ddb, role ffe6794e39904fa6952b0ea613a4d6a9, project 82c74fbf994d418785693613b12d9855
2025-12-18 14:59:06,518 INFO Recreated domain role assignment: user 961b6ff0ed1e44e8beba4cf8b73a0ddb, role 8d1af15bb8e04166b15ba9ff2d77644e, domain 9596f3d3d90149f39ea3c27c52d8b78d
2025-12-18 14:59:06,522 INFO Successfully migrated user resource, destination id: 961b6ff0ed1e44e8beba4cf8b73a0ddb