Manage access to the cloud firewall

Access to the cloud firewall is adjustable:

projects - define access within an isolated group of resources;
role model - defines access different users within an account and project.

Role model access

For more information about role model access, see the Access Control in Selectel Products manual.

member

User with full access to all services. Access control is not available for: users, service users, user groups and federations.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View a list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

iam_admin

User with access to user management and without access to services and billing. Cannot manage his account: change permissions, manage notifications, delete the user. The first user with the iam_admin role is created by the Account Owner.

Access areas	Account
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	Manage users, service users, user groups with cloud firewall access, and manage federations

reader

A user with access to view everything he controls member in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View a list of cloud firewalls and information about them
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project

vpc.admin

User with access to manage cloud platform networks (private networks and subnets, public subnets and public IP addresses, cloud routers), cloud firewalls, security groups, cloud load balancers.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View a list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

vpc.viewer

User with access to view everything he controls vpc.admin in the same access area.

Access areas	Account
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View the list of cloud firewalls and information about them in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project

vpc.network_security.admin

User with access to manage the means to limit traffic on cloud platform networks - cloud firewalls, security groups.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View a list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

vpc.network_security.user

A user with access to view everything they manage vpc.network_security.admin in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View the list of cloud firewalls and information about them in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project

vpc.network_security.viewer.

A user with access to view everything they manage vpc.network_security.admin in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud firewall operations	In the Account access area: View the list of cloud firewalls and information about them in all projects
Available cloud firewall operations	In the access area Project: View the list of cloud firewalls and information about them in the selected project