...
There was no need to create local accounts on the cloud framework, ephemeral users are using instead: it was created a set of rules that, depending on the entitlements provided by COmanage (ownership to the COs with a precise role), associate the external users to the right group (openstack project).
Schema
TBA
...