---
title: "Add User"
sidebar_label: "Add User"
sidebar_position: 1
description: "How to add a user with access to the control panel or a service user"
---

import AddServiceUser from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/access-control/add-service-user.mdx'
import Formbricks from '@theme/MDXComponents/Formbricks'
import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import {TabItemLabel} from '@selectel/docux/components'

# Add user

Users can be added by the [Account Owner](/access-control/user-types.mdx#account-owner) or users with the [`iam.admin`](/access-control/role-reference.mdx#iam-admin) role.

You can [add a control panel user](#add-panel-user) or [add a service user](#add-service-user) for programmatic access; more details are in the instruction [User Types](/access-control/user-types.mdx).

If there are any problems when adding a user, [create a ticket](https://my.selectel.ru/tickets/create?topic=balance_and_payment/).

## Add control panel user \{#add-panel-user}

You can add [control panel users](/access-control/user-types.mdx#panel-users), who will authenticate in the control panel using one of the following methods:

* by login and password;
* or by SSO, if you use [federations](/access-control/federations/).

  If you enabled automatic user creation when creating a federation on the Selectel side and you have [group mapping](/access-control/groups/mapping.mdx) configured, users will be created automatically [upon initial SSO authentication](/access-control/federations/sso-authentication.mdx#first-auth) — in this case, you do not need to add them manually.

<Tabs queryString="add-user-in-the-control-panel">
  <TabItem value="login-and-password" default>
    <TabItemLabel>
      Login and password
    </TabItemLabel>

    1. In the [control panel](https://my.selectel.ru/iam/users), click **IAM** on the top menu.

    2. Go to the **Control Panel Users** section.

    3. Click **Add control panel user**.

    4. In the **User details** block:

       4.1. If the **Login method** field is available, select **Control panel**.

       4.2. In the **Email** field, enter an email address.

       4.3. Optional: enter a user description.

    5. In the **Access settings** block:

       5.1. Configure the permission by selecting:

       * [access scope](/access-control/access-management.mdx#scopes). If you selected the **Projects** access scope, select the required projects; ;
       * [role](/access-control/access-management.mdx#roles).  To add users with the [`member`](/access-control/role-reference.mdx#member) role, the account [balance](/balance-and-payments/balance.mdx) must be at least 200 ₽.

       5.2. Optional: to assign an additional permission to the user, click **Add permission** and repeat step 5.1.

       5.3. Optional: select a [group](/access-control/groups/) for the user.

    6. Click **Add user**.

       The user will be added to the list on the **Control Panel Users** page with the status `Not activated`. An email with a link for [registration by invitation](/account/registration.mdx#sign-up-by-invitation) will be sent to their email address. The account is activated after the email is confirmed and registration is completed.
  </TabItem>

  <TabItem value="sso">
    <TabItemLabel>
      SSO
    </TabItemLabel>

    1. In the [control panel](https://my.selectel.ru/iam/users), click **IAM** on the top menu.

    2. Go to the **Control Panel Users** section.

    3. Click **Add control panel user**.

    4. In the **User details** block:

       4.1. In the **Login method** field, select **Federation (Federation name)**.

       4.2. In the **External ID** field, enter the user identifier on your provider side. The format of the identifier depends on the provider — UPN, email, or other. After a user is created, the External ID cannot be changed.

       4.3. In the **Email** field, enter an email address.

       4.4. Optional: enter a user description.

    5. In the **Access settings** block:

       5.1. Configure the permission by selecting:

       * [access scope](/access-control/access-management.mdx#scopes). If you selected the **Projects** access scope, select the required projects;
       * [role](/access-control/access-management.mdx#roles).  To add users with the [`member`](/access-control/role-reference.mdx#member) role, the account [balance](/balance-and-payments/balance.mdx) must be at least 200 ₽.

       5.2. Optional: to assign an additional permission to the user, click **Add permission** and repeat step 5.1.

       5.3. Optional: select [groups](/access-control/groups/) for the user.

    6. Click **Add user**. The user will be added to the list on the **Control Panel Users** page. To view only users of a specific federation in the list, select it in the authentication types field.

    7. A link will be sent to the user's email for [authentication](/access-control/federations/sso-authentication.mdx).
  </TabItem>
</Tabs>

## Add a service user \{#add-service-user}

<AddServiceUser />

### View service user identifier \{#view-service-user-id}

1. In the [control panel](https://my.selectel.ru/iam/service-users), click **IAM** on the top menu.
2. Go to the **Service users** section.
3. In the service user's row, view the value of the **UID** field.

<Formbricks />