Manage access to cloud firewall

Last update: October 13 2026Open in Markdown

Access to cloud firewall is regulated by:

• projects — define access within an isolated group of resources;
• role model — defines access for different users within an account and a project.

Access within the role model

For more information about access within the role model, see the Access Management in Selectel Products instructions.

member

A user with full access to all services. Cannot manage access for: users, service users, user groups, and federations.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

iam.admin

A user with access to user management and without access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access areas	Account
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	Manage Control panel users, service users, user groups with access to the cloud firewall, as well as manage federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access areas	Account
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	View Control panel users, service users, user groups, and federations; viewing user keys; view notifications of other users; view account access restrictions

reader

A user with access to view everything managed by member in the same access scope.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project

vpc.admin

A user with access to managing cloud platform networks (private networks and subnets, public subnets and public IP addresses, cloud routers), cloud firewalls, security groups, and cloud load balancers.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

vpc.viewer

A user with access to view everything managed by vpc.admin in the same access scope.

Access areas	Account
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project

vpc.network_security.admin

A user with access to managing traffic restriction tools in cloud platform networks — cloud firewalls, security groups.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects; managing cloud firewalls in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project; managing cloud firewalls in the selected project

vpc.network_security.user

A user with access to view everything managed by vpc.network_security.admin in the same access scope.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project

vpc.network_security.viewer

A user with access to view everything managed by vpc.network_security.admin in the same access scope.

Access areas	Account; Project
Who can be assigned	Users; service users; user groups
Available operations with cloud firewall	In the Account access area: viewing the list of cloud firewalls and information about them in all projects
	In the Project access area: viewing the list of cloud firewalls and information about them in the selected project