Skip to main content

Restrict access to the account

Last update:

By default, access to the account is allowed from all IP addresses. Account owner and users with the role iam_admin can restrict access to the account — users will be able to log in to the account only from IP addresses and subnets that the Account Owner or iam_admin has added to the allowed list.

Access restriction applies to logging in through the control panel and accessing the API at addresses that include https://api.selectel.ru.Подробнее about API access and authorization in the API Documentation Request Authentication instruction.

The access restriction does not apply to the external panel.

Add an address to the list of allowed addresses

Before adding an IP address, make sure that the IP address is static.The type of address can be obtained from your ISP.

  1. In the control panel, on the top menu, click Account.

  2. Go to the ACL section.

  3. Click Add Addresses.

  4. To retain access to your account, first add your current IP address.

  5. Click Add another address.

  6. Enter an address. You can add:

    • IPv4 address;
    • IPv6 address;
    • subnet in the format 55.55.55.55.55/29.

  7. Optional: Enter a comment. For example, specify to whom the specified IP address or subnet belongs. The maximum length of the comment is 256 characters.

  8. Click Add. Sessions from addresses that are not listed will be terminated and access to the account from them will be denied.

Remove an address from the list of allowed addresses

The account owner and iam_admin can delete one address or all addresses from which access to the account is allowed.If all addresses are deleted, all restrictions will be removed — users will be able to access the account from any addresses.

  1. In the control panel, on the top menu, click Account.
  2. Go to the ACL section.
  3. From the address menu, select Delete.
  4. To confirm the deletion, enter the address.
  5. Click Delete.