Edit user details or permissions

Last update: October 07 2026Open in Markdown

Account and user information is contained in the profile. The set of data in the profile depends on the account type, user type, and role. You can view your profile in the Control panel under Profile and settings.

Account Owner and users with the iam.admin role can view information about all users in the Control panel: IAM → Control panel users and Service users.

The Account Owner and iam.admin can edit user details. Users can edit some details on their own. Not all details can be changed; for details, see the What details can be changed section.

What details can be changed

	Control panel user (login and password)	Control panel user (SSO)	Service user
Name	✗ (you must delete the old user and add a new one)	✗	✓
Login or External ID	—	✗ (not stored in Selectel)	✓
Password	✓ (changed by user)	✗ (not stored in Selectel)	✓
Permissions (scope and role)	✓	✓	✓
Project	✓	✓	✓
Email	✓ (changed by user)	✗	—
Phone number	✓ (changed by user)	—	—
Description	✓	✓	✓
User groups	✓	✓	✓
Notification categories	✓	✓	—
SSH keys	✓	✓	✓
S3 keys	✓	—	✓
ADB keys	✓	✓	✓
Proxy keys	✓	✓	✓

* A user with the iam.admin role cannot change their own role, but the Account Owner or another iam.admin can.

To change the phone number, email address, full name, or company details, edit profile details.

Details of control panel users that are linked to a federation and authenticate via SSO are not stored in Selectel. Their details can be changed on your identity provider's side.

Edit Account Owner details

If you have a business account, the Account Owner profile lists a contact person — the employee responsible for your organization's account. If the responsible employee has changed or their contact details have changed, you can change the full name, phone number, and email address in the Account Owner profile. You cannot change the organization the account is registered to, but you can register a new account and transfer services to it.

If you have an individual account, you can change the phone number and email address. You can change the full name only if the Account Owner's name has changed or contains a typo. You cannot specify another person's name in the Account Owner profile, but you can register a new account and transfer services to it.

Edit service user name

1. In the Control panel, from the top menu, click IAM.
2. Go to Service users.
3. In the user's menu, click Edit.
4. Make changes.
5. Click Save.

Edit service user password

1. In the Control panel, from the top menu, click IAM.

2. Go to Service users.

3. In the user's menu, click Change password.

4. Enter a new password or click Generate. The password must be at least 20 characters long and contain at least:

   • one uppercase and one lowercase Latin letter (A-Z, a-z);
   • one digit (0-9);
   • one special character from the list of ASCII Printable 7-Bit Special Characters:
     !"#$%&'()*+,-./:;<=>?@[]^_{|}~.

5. Click Change password.

Edit user description

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the User details block, edit the description.

5. Click Save.

Edit user permissions

You can edit user permissions manually or import permissions from another user.

Edit permissions manually

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. In the user's menu, click Edit.

4. To add a permission, in the Access settings block:

   4.1. Click Add permission.

   4.2. On the permission card, select:

   • scope. If you selected the Projects scope, select the required projects;
   • role. To add users with the member role, the account balance must have at least 200 ₽.

5. To delete a permission, in the Access settings block, on the permission card, click .

6. Click Save.

Import

The imported permissions will replace all other permissions.

1. Make sure that you exported permissions of another user or group.

2. In the Control panel, from the top menu, click IAM.

3. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

4. In the user's menu, click Edit.

5. In the Access settings block, click Import.

6. Select the exported permissions file.

7. Click Import.

Edit user projects

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, edit the user's projects.

5. Click Save.

Edit user groups

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, edit the user's groups.

5. Click Save.

Edit user notification categories

Use the Account notifications instructions.

Manage user SSH keys

Control panel users, including federated users, can manage their SSH keys on their own. For more information about SSH keys, see the Create and place an SSH key on a cloud server instructions.

Add SSH key

You can add a public SSH key to a user profile and then place it when creating a server.

The key will be available in all projects to which the user is added.

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, click Add key.

5. Enter a key name.

6. Paste a public SSH key in the OpenSSH format.

7. Click Add.

Delete SSH key

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, in the key's menu, select Delete.

5. Click Delete.

Manage user S3 keys

An S3 key is used to work with S3 via API and to work with logs via AWS CLI.

Issue S3 key

Control panel users can issue S3 keys to themselves, but we recommend creating service users and issuing S3 keys to them.

Only the Account Owner or a user with the iam.admin role can issue S3 keys to other users. A service user cannot obtain an S3 key independently because they do not have access to the control panel — the Account Owner or iam.admin must issue a key to them.

You must create a separate key for each project. You can issue multiple keys for a single project.

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the S3 keys block, click Add key.

5. Enter a key name.

6. Select the project for which the key will work.

7. Click Generate. Two values will be generated:

   • Access key — Access Key ID, a key identifier;
   • Secret key — Secret Access Key, a secret key.

8. Click Copy and save the key — it cannot be viewed after closing the window.

Delete S3 key

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the S3 keys block, in the key row, click .

5. Click Delete.

Manage user ADB keys

ADB keys are used to work with Mobile Farm devices. Control panel users, including federated ones, can manage their ADB keys on their own. For details, see the Manage ADB keys section of the Manage access keys instructions.

Add ADB key

You can add a public ADB key to another user's profile, and that user can then use the key to connect to Mobile Farm devices via ADB.

The key will be available in all projects to which the user is added.

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, click Add key.

5. Enter a key name.

6. Paste a public ADB key.

7. Click Add.

Delete ADB key

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, in the key row, click .

5. Click Delete.

Manage user Proxy keys

A Proxy key is used to proxy traffic for Mobile Farm devices.

Issue Proxy key

Control panel users can add Proxy keys for themselves, but we recommend creating service users and issuing Proxy keys to them.

Only the Account Owner or a user with the iam.admin role can issue Proxy keys to other users. A service user cannot obtain a Proxy key on their own because they have no access to the control panel; the key must be issued to them by the Account Owner or iam.admin.

The key will be available in all projects to which the user is added.

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, click Add key.

5. Enter a key name.

6. Click Generate key.

7. In the Key field, click and save the key to a safe place — you will not be able to view it after closing the window.

Delete Proxy key

1. In the Control panel, from the top menu, click IAM.

2. Go to the section with the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, in the key row, click .

5. Click Delete.