Change user data or permissions

Information about the account and the user is contained in the profile. The set of data in the profile depends on the account type, user type, and role. You can view your profile in the control panel in the Profile and settings section.

The Account Owner and a user with the iam.admin role can access information about all users in the control panel: IAM → Users and Service Users sections.

The Account Owner and iam.admin can change user data. Users can change some data themselves. Not all data can be changed; see details in the What data can be changed subsection.

What data can be changed

	User	Service user	Federated user
Name	✗ (you must delete the old user and add a new one)	✓	✗
Login or External ID	—	✓	✗ (not stored in Selectel)
Password	✓ (changed by user)	✓	✗ (not stored in Selectel)
Permissions (scope and role)	✓	✓	✓
Project	✓	✓	✓
Email	✓ (changed by user)	—	✗
Phone number	✓ (changed by user)	—	—
Description	✓	✓	✓
User groups	✓	✓	✓
Notification categories	✓	—	✓
SSH keys	✓	✓	✓
S3 keys	✓	✓	—
ADB keys	✓	✓	✓

* Users with the iam.admin role cannot change their own role, but the Account Owner or another iam.admin can do it.

To change your phone number, email address, full name, or company details, change your profile data.

Data of federated users is not stored in Selectel; it can be changed on your Identity Provider's side.

Change Account Owner data

If you have a business account, the Account Owner's profile contains a contact person — an employee responsible for working with your organization's account. If the responsible employee has changed or their contact details have changed, you can change the full name, phone number, and email address in the Account Owner's profile. You cannot change the organization the account is registered to — you can register a new account and transfer services to it.

If you have a personal account, you can change your phone number and email address. The full name can only be changed if the Account Owner's full name has changed or there is an error in it. You cannot specify someone else's full name in the Account Owner's profile — you can register a new account and transfer services to it.

Change service user name

In the control panel, on the top menu, click IAM.
Go to the Service Users section.
In the user menu, click Edit.
Make the changes.
Click Save.

Change service user password

In the control panel, on the top menu, click IAM.
Go to the Service Users section.
In the user menu, click Change password.
Enter a new password or click Generate. The password must be at least 20 characters long and include at least:
- one uppercase and one lowercase Latin letter (A-Z, a-z);
- one digit (0-9);
- one special character from the ASCII Printable 7-Bit Special Characters list:
  !"#$%&'()*+,-./:;<=>?@[]^_{|}~.
Click Change password.

Change user description

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
In the user menu, click Edit.
In the User details block, change the description.
Click Save.

Change user permissions

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
In the user menu, click Edit.
In the Access settings block, change the permissions:

4.1.Optional: change the scope. If you changed the scope to Projects, select new projects.

4.2.Change the role.
Click Save.

Change user projects

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
In the user menu, click Edit.
In the Access settings block, change the user projects.
Click Save.

Change user groups

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
In the user menu, click Edit.
In the Access settings block, change the user groups.
Click Save.

Change user notification categories

Refer to the Account notifications instructions.

Manage user SSH keys

Users with access to the control panel, including federated users, can manage their own SSH keys. Learn more about SSH keys in the Creating and placing an SSH key on a cloud server instructions.

Add SSH key

A public SSH key can be added to a user profile and then used when creating a server.

The key will be available in all projects to which the user has been added.

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
Open the user page → Access tab.
In the SSH keys block, click Add key.
Enter a key name.
Paste the public SSH key in OpenSSH format.
Click Add.

Remove SSH key

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
Open the user page → Access tab.
In the SSH keys block, in the key menu , select Remove.
Click Remove.

Manage user S3 keys

The S3 key is used for working with S3 via API and for working with logs via AWS CLI.

Issue S3 key

Users with access to the control panel can issue S3 keys for themselves, but we recommend creating service users and issuing S3 keys to them.

Only the Account Owner or a user with the iam.admin role can issue S3 keys to other users. A service user cannot get an S3 key independently because they do not have access to the control panel — the Account Owner or iam.admin.

You must create a separate key for each project. You can issue multiple keys for one project.

In the control panel, click IAM.
Go to the section for the required user type:
- Users — for users with access to the control panel;
- Service users — for service users.
Open the user page → in the Access tab.
In the S3 keys block, click Add key.
Enter a key name.
Select a project for which the key will work.
Click Generate. Two values will be generated:
- Access key — Access Key ID, a key identifier;
- Secret key — Secret Access Key, a secret key.
Click Copy and save the key — you will not be able to view it after closing the window.

Remove S3 key

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
Open the user page → Access tab.
In the S3 keys block, in the key row, click .
Click Remove.

Manage user ADB keys

ADB keys are used for working with mobile farm devices. Users with access to the control panel, including federated ones, can manage their own ADB keys. See more in the Managing ADB keys section of the Managing access keys instructions.

Add ADB key

A public ADB key can be added to another user's profile, and that user will then be able to use the key for connecting to mobile farm devices via ADB.

The key will be available in all projects to which the user has been added.

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
Open the user page → Access tab.
In the ADB keys block, click Add key.
Enter a key name.
Paste the public ADB key.
Click Add.

Remove ADB key

In the control panel, on the top menu, click IAM.
Go to the section with the required user type:
- Users — for users with access to the control panel;
- Service Users — for service users.
Open the user page → Access tab.
In the ADB keys block, in the key row, click .
Click Remove.