...
There was no need to create local accounts on the cloud framework, ephemeral users are using instead: it was created a set of mapping rules that, depending on the entitlements provided by COmanage (ownership to the COs with a precise role), associate the external users to the right group (openstack projectdefined into openstack, and each of them can access to as particuale OpernStack project with different rights (either admin or simple user).
Schema
TBA