# Managing Trusts

Trilio is using the [Openstack Keystone Trust system](https://wiki.openstack.org/wiki/Keystone/Trusts) which enables the Trilio service user to act in the name of another Openstack user.

This system is used during all backup and restore features.

{% hint style="danger" %}
Openstack Administrators should never have the need to directly work with the trusts created.

The cloud-trust is created during the Trilio configuration and further trusts are created as necessary upon creating or modifying a workload.
{% endhint %}

Trusts can only be worked with via CLI

## List all trusts

```
workloadmgr trust-list
```

## Show a trust

```
workloadmgr trust-show <trust_id>
```

* \<trust\_id> :arrow\_right: ID of the trust to show

## Create a trust

```
workloadmgr trust-create [--is_cloud_trust {True,False}] <role_name>
```

* `<role_name>` :arrow\_right:Name of the role that trust is created for
* `--is_cloud_trust {True,False}` :arrow\_right: Set to true if creating cloud admin trust. While creating cloud trust use same user and tenant which used to configure Trilio and keep the role admin.

## Delete a trust

```
workloadmgr trust-delete <trust_id>
```

* `<trust_id>` :arrow\_right: ID of the trust to be deleted