---
title: "Change user data or permissions"
sidebar_label: "Change user data or permissions"
sidebar_position: 2
description: "How to change user permissions and data"
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import {CustomTable} from '@selectel/docux/components'
import MoreVerticalIcon from '@selectel/docux/icons/more-vertical'
import TrashIcon from '@selectel/docux/icons/trash'
import CheckIcon from '@selectel/docux/icons/check'
import CopyIcon from '@selectel/docux/icons/copy'
import IssueS3Key from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/common/issue-s3-key.mdx'

# Change user data or permissions

Account and user information is available in your profile. The data in your profile depends on the [account type](/account/registration.mdx#account-types), [user type](/access-control/user-types.mdx), and [role](/access-control/access-management.mdx#roles). You can view your profile in the [Control Panel](https://my.selectel.ru/profile/profile/) in the **Profile and settings** section.

[The account owner](/access-control/user-types.mdx#account-owner) and a user with the [`iam.admin`](/access-control/role-reference.mdx#iam-admin) role can see information about all users in the [control panel](https://my.selectel.ru/iam/users): **IAM** → **Panel Users** and **Service Users** sections.

The account owner and `iam.admin` can edit user data. Users can change some data themselves. Not all data can be changed; see the [Data that can be changed](#what-can-be-changed) subsection.

## What data can be changed \{#what-can-be-changed}

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Panel user (login and password)</th><th>Panel user (SSO)</th><th>Service user</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th>Name</th><td>✗ <small>(you must [delete the old user](/access-control/manage/disable-or-delete-user.mdx) and [add a new one](/access-control/manage/add-user.mdx))</small></td><td>✗</td><td>✓</td>
      </tr>

      <tr>
        <th>Login or External ID</th><td>—</td><td>✗ <small>(not stored in Selectel)</small></td><td>✓</td>
      </tr>

      <tr>
        <th>Password</th><td>✓ <small>([changed by user](/account/change-profile.mdx#change-password))</small></td><td>✗ <small>(not stored in Selectel)</small></td><td>✓</td>
      </tr>

      <tr>
        <th>Permissions (scope and role)</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>Project</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>Email</th><td>✓ <small>([changed by user](/account/change-profile.mdx#change-email))</small></td><td>✗</td><td>—</td>
      </tr>

      <tr>
        <th>Phone number</th><td>✓ <small>([changed by user](/account/change-profile.mdx#change-phone-number))</small></td><td>—</td><td>—</td>
      </tr>

      <tr>
        <th>Description</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>User groups</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>Notification categories</th><td>✓</td><td>✓</td><td>—</td>
      </tr>

      <tr>
        <th>SSH keys</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>S3 keys</th><td>✓</td><td>—</td><td>✓</td>
      </tr>

      <tr>
        <th>ADB keys</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>

      <tr>
        <th>Proxy keys</th><td>✓</td><td>✓</td><td>✓</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

`*` A user with the [`iam.admin`](/access-control/role-reference.mdx#iam-admin) role cannot change their own role, but the [Account Owner](/access-control/user-types.mdx#account-owner) or another `iam.admin`.

To change your phone number, email address, full name, or company details, [edit your profile data](/account/change-profile.mdx).

Panel user data linked to a [federation](/access-control/federations/about-federations.mdx) and authenticated via SSO is not stored in Selectel. You can change this data on your identity provider's side.

## Edit Account Owner data \{#change-account-owner-data}

If you have a business account, the Account Owner profile lists a contact person—an employee responsible for managing your organization's account. If the responsible employee has changed or their contact details have been updated, you can [change the full name](/account/change-profile.mdx#change-full-name), [phone number](/account/change-profile.mdx#change-phone-number), and [email address](/account/change-profile.mdx#change-email) in the Account Owner profile. You cannot change the organization the account is registered to—you can [register a new account](/account/registration.mdx) and [transfer services to it](/account/transfer-services.mdx).

If you have a personal account, you can [change your phone number](/account/change-profile.mdx#change-phone-number) and [email address](/account/change-profile.mdx#change-email). [You can only change the full name](/account/change-profile.mdx#change-full-name) if the Account Owner's name has changed or if it was entered incorrectly. You cannot enter another person's name in the Account Owner profile—you can [register a new account](/account/registration.mdx) and [transfer services to it](/account/transfer-services.mdx).

## Edit service user name \{#rename-service-user}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.
2. Go to the **Service Users** section.
3. In the  user menu, click **Edit**.<MoreVerticalIcon />
4. Make the changes.
5. Click **Save**.

## Change service user password \{#change-service-user-password}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the **Service Users** section.

3. In the  user menu, click **Change Password**.<MoreVerticalIcon />

4. Enter a new password or click **Generate**. The password must be at least 20 characters long and include at least:

   * one uppercase and one lowercase Latin letter (`A-Z`, `a-z`);
   * one digit (`0-9`);
   * one special character from the ASCII Printable 7-Bit Special Characters list:<br />`!"#$%&'()*+,-./:;<=>?@[]^_{|}~.`

5. Click **Change Password**.

## Edit user description \{#change-user-description}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.
2. Go to the section with the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.
3. In the user  menu, click **Edit**.<MoreVerticalIcon />
4. In the **User details** block, change the description.
5. Click **Save**.

## Edit user permissions \{#change-user-permission}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. In the user  menu, click **Edit**.<MoreVerticalIcon />

4. In the **Access settings** block, change the permission:

   4.1. Optionally: change the access scope. If you changed the access scope to **Projects**, select new projects.

   4.2. Change the role.

5. Click **Save**.

## Edit user projects \{#change-user-projects}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. In the user  menu, click **Edit**.<MoreVerticalIcon />

4. In the **Access settings** block, change the user projects.

5. Click **Save**.

## Edit user groups \{#edit-user-groups}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. In the user  menu, click **Edit**.<MoreVerticalIcon />

4. In the **Access settings** block, change the user groups.

5. Click **Save**.

## Edit user notification categories \{#change-notifications-category}

Use the [Account Notifications](/account/notifications.mdx) instructions.

## Manage user SSH keys \{#manage-ssh-keys}

[Panel users](/access-control/user-types.mdx#panel-users), including [federated users](/access-control/federations/about-federations.mdx#federation-users), can [manage their SSH keys independently](/account/manage-keys.mdx#manage-ssh-keys). More details on SSH keys in the [Create and add an SSH key to a cloud server](/cloud-servers/manage/create-and-place-ssh-key.mdx) article.

### Add SSH key \{#add-ssh-key}

You can add a public SSH key to a user profile and then add it when [creating a server](/cloud-servers/manage/create-and-place-ssh-key.mdx#place-public-ssh-key).

The key will be available in all projects that the user is added to.

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. Open the user page → **Access** tab.

4. In the **SSH keys** block, click **Add key**.

5. Enter a key name.

6. Paste the public SSH key in OpenSSH format.

7. Click **Add**.

### Delete SSH key \{#delete-ssh-key}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. Open the user page → **Access** tab.

4. In the **SSH keys** block, in the  key menu, select **Delete**.<MoreVerticalIcon />

5. Click **Delete**.

## Manage user S3 keys \{#manage-s3-keys}

An S3 key is used to [work with S3 via API](/s3/about/manage-access.mdx#keys-for-api-access) and to [work with logs via AWS CLI](/logs/tools/aws-cli.mdx).

### Issue S3 key \{#issue-s3-key}

<IssueS3Key />

### Delete S3 key \{#delete-s3-key}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. Open the user page → **Access** tab.

4. In the **S3 keys** block, in the key row, click .<TrashIcon />

5. Click **Delete**.

## Manage user ADB keys \{#manage-adb-keys}

ADB keys are used for [working with mobile farm devices](/mobile-farm/manage/). [Panel users](/access-control/user-types.mdx#panel-users), including federated users, can manage their ADB keys independently. More details in the [Manage ADB keys](/account/manage-keys.mdx#manage-adb-keys) subsection of the [Manage access keys](/account/manage-keys.mdx) article.

### Add ADB key \{#add-adb-key}

You can add a public ADB key to another user's profile, and that user will then be able to use the key to [connect to mobile farm devices via ADB](/mobile-farm/manage/connect-to-device-with-adb.mdx).

The key will be available in all projects that the user is added to.

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. Open the user page → **Access** tab.

4. In the **ADB keys** block, click **Add key**.

5. Enter a key name.

6. Paste the public ADB key.

7. Click **Add**.

### Delete ADB key \{#delete-adb-key}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section for the required [user type](/access-control/user-types.mdx):

   * **Panel Users** — for users with access to the control panel;
   * **Service Users** — for users with programmatic access without control panel access.

3. Open the user page → **Access** tab.

4. In the **ADB keys** block, in the key row, click .<TrashIcon />

5. Click **Delete**.

## Manage user Proxy keys \{#manage-proxy-keys}

A Proxy key is used for [proxying traffic for mobile farm devices](/mobile-farm/manage/manage-proxy.mdx).

### Issue Proxy key \{#issue-proxy-key}

[Panel users](/access-control/user-types.mdx#panel-users) can [add Proxy keys for themselves](/account/manage-keys.mdx#manage-proxy-keys), but we recommend [creating service users](/access-control/manage/add-user.mdx#add-service-user) and issuing Proxy keys to them.

Only the [Account Owner](/access-control/user-types.mdx#account-owner) or a user with the [`iam.admin`](/access-control/role-reference.mdx#iam-admin) role can issue Proxy keys to other users. [Service users](/access-control/user-types.mdx#service-users) cannot obtain a Proxy key independently because they do not have access to the control panel — the key must be issued to them by the Account Owner or `iam.admin`.

The key will be available in all projects that the user is added to.

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section with the required [user type](/access-control/user-types.mdx):

   * **Panel users** — for users with access to the control panel;
   * **Service users** — for [service users](/access-control/user-types.mdx#service-users).

3. Open the user page →  **Access** tab.

4. In the **Proxy keys** block, click **Add key**.

5. Enter a key name.

6. Click **Generate key**.

7. In the **Key** field, click <CopyIcon /> and save the key in a safe place — it cannot be viewed after the window is closed.

### Delete Proxy key \{#delete-proxy-key}

1. In the [control panel](https://my.selectel.ru/iam/service-users), on the top menu, click **IAM**.

2. Go to the section with the required [user type](/access-control/user-types.mdx):

   * **Panel users** — for users with access to the control panel;
   * **Service users** — for [service users](/access-control/user-types.mdx#service-users).

3. Open the user page → **Access** tab.

4. In the **Proxy keys** block, click the icon in the key row.<TrashIcon />

5. Click **Delete**.

<Formbricks />
