Add user

Last update: October 05 2026Open in Markdown

Users can be added by the Account Owner and users with the iam.admin role.

You can add a panel user or add a service user for programmatic access; for details, see the User types instruction.

If you have problems adding a user, submit a ticket.

Add panel user

You can add panel users who will authenticate in the control panel in one of the following ways:

• using login and password;

• or via SSO if you use federations.

  If you enabled automatic user creation on the Selectel side when creating the federation and have configured group mapping, users will be created automatically upon their first SSO authentication — in this case, there is no need to add them manually.

Login and password

1. In the Control panel, in the top menu, click IAM.

2. Go to the Panel users section.

3. Click Add panel user.

4. In the User details section:

   4.1. If you have the Sign-in method field, select Control panel.

   4.2. In the Email field, enter an email address.

   4.3. Optional: enter a user description.

5. In the Access settings section, configure the user's permissions and groups. You can add permissions manually or import permissions from another user or group:

   Configure manually

   5.1. In the permission card, select:

   • scope. If you selected the Projects scope, select the required projects;
   • role. To add users with the member role, the account balance must be at least 200 ₽.

   5.2. Optional: to assign another permission to the user, click Add permission and repeat step 5.1.

   Import

   5.1. Make sure that you exported permissions of another user or group.

   5.2. Click Import.

   5.3. Select the permissions file you exported.

   5.4. Click Import.

6. Optional: select a group for the user.

7. Click Add user.

   The user will be added to the list on the Panel users page with the Not activated status. A link for registration by invitation will be sent to their email. The account will be activated after confirming the email and completing registration.

SSO

1. In the Control panel, in the top menu, click IAM.

2. Go to the Panel users section.

3. Click Add panel user.

4. In the User details section:

   4.1. In the Sign-in method field, select Federation (Federation name).

   4.2. In the External ID field, enter the user identifier on your identity provider's side. The identifier format depends on the provider — UPN, email, or other. After creating the user, the External ID cannot be changed.

   4.3. In the Email field, enter an email address.

   4.4. Optional: enter a user description.

5. In the Access settings section, configure the user's permissions and groups. You can add permissions manually or import permissions from another user or group:

   Configure manually

   5.1. In the permission card, select:

   • scope. If you selected the Projects scope, select the required projects;
   • role. To add users with the member role, the account balance must be at least 200 ₽.

   5.2. Optional: to assign another permission to the user, click Add permission and repeat step 5.1.

   Import

   5.1. Make sure that you exported permissions of another user or group.

   5.2. Click Import.

   5.3. Select the permissions file you exported.

   5.4. Click Import.

6. Optional: select a group for the user.

7. Click Add user.

   The user will be added to the list on the Users page. To view only users of a specific federation in the list, select it in the authentication types field. A link for authentication will be sent to the user's email.

Add service user

1. In the control panel, in the top menu, click IAM.

2. Go to the Service users section.

3. Click Add service user.

4. In the Service user details block:

   4.1. Enter a username. It will be used for authorization.

   4.2. Enter a password for the user or generate one. Once the user is created, you cannot view the password — you can only change it. The password must be at least 20 characters long and include at least:

   • one uppercase and one lowercase Latin letter (A-Z, a-z);
   • one digit (0-9);
   • one special character from the ASCII Printable 7-Bit Special Characters list:
     !"#$%&'()*+,-./:;<=>?@[]^_{|}~.

   4.3. Optional: enter a description for the user.

5. In the Access settings block, configure user permissions and groups. You can add permissions manually or import permissions of another user or group:

   Configure manually

   5.1. In the permission card, select:

   • scope. If you selected the Projects scope, select the required projects;
   • role. To add users with the member role, the account balance must be at least 200 ₽.

   5.2. Optional: to assign another permission to the user, click Add permission and repeat step 5.1.

   Import

   5.1. Make sure you have exported the permissions of another user or group.

   5.2. Click Import.

   5.3. Select the permissions file that you exported.

   5.4. Click Import.

6. Optional: select a group for the user.

7. Click Add user. It will be added to the list on the Service users page. The account will be active immediately.

View service user ID

1. In the Control panel, in the top menu, click IAM.
2. Go to the Service users section.
3. In the service user row, view the value of the UID field.