Manage access to the cloud load balancer

Last update: December 22 2025

Access to the cloud load balancer is adjustable:

• projects - define access within an isolated group of resources;
• role model - defines access different users within an account and project.

Role model access

For more information about role model access, see the Access Control in Selectel Products manual.

member

User with full access to all services. Access control is not available for: users, service users, user groups and federations.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view balancer statistics in all projects; managing load balancers, rules and HTTP policies, target groups, availability checks in all projects; Enabling and disabling balancer logging in all projects
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view statistics of balancers in the selected project; managing load balancers, rules and HTTP policies, target groups, availability checks in the selected project; enable or disable balancer logging in the selected project

iam_admin

User with access to user management and without access to services and billing. Cannot manage his account: change permissions, manage notifications, delete the user. The first user with the iam_admin role is created by the Account Owner.

Access areas	Account
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	Manage users, service users, user groups with access to the cloud load balancer, and manage federations

reader

A user with access to view everything he controls member in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks

vpc.admin

User with access to manage cloud platform networks (private networks and subnets, public subnets and public IP addresses, cloud routers), cloud firewalls, security groups, cloud load balancers.

Port assignment to the cloud server is not available.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view balancer statistics in all projects; managing load balancers, rules and HTTP policies, target groups, availability checks in all projects; Enabling and disabling balancer logging in all projects
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view statistics of balancers in the selected project; managing load balancers, rules and HTTP policies, target groups, availability checks in the selected project; enable or disable balancer logging in the selected project

vpc.viewer

User with access to view everything he controls vpc.admin in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks

vpc.load_balancer.admin

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view balancer statistics in all projects; management of load balancer objects (except for load balancer creation) in all projects. Creating a load balancer additionally requires one or more roles. The additional roles depend on the network in which the load balancer will be created: vpc.admin to create a balancer on any subnet; vpc.private_network.admin to create a balancer on a private subnet; vpc.external_access.admin to create a balancer on the public subnet; role combination vpc.private_network.admin. and vpc.external_access.admin to create a balancer on a private subnet with a public IP address; Enabling and disabling balancer logging in all projects
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks; view statistics of balancers in the selected project; management of load balancer objects (except for load balancer creation) in the selected project. To create a load balancer, one or more additional roles are required. The additional roles depend on the network in which the load balancer will be created: vpc.admin to create a balancer on any subnet; vpc.private_network.admin to create a balancer on a private subnet; vpc.external_access.admin to create a balancer on the public subnet; role combination vpc.private_network.admin. and vpc.external_access.admin to create a balancer on a private subnet with a public IP address; Enable or disable logging of balancers in the selected project

vpc.load_balancer.viewer

User with access to view everything he manages vpc.load_balancer.admin in the same access area.

Access areas	Account; project
Who can be prescribed	Users; to service users; user groups
Available cloud load balancer operations	In the Account access area: View a list of all load balancer objects and information about them in all projects: load balancers, rules and HTTP policies, target groups and servers in them, availability checks
	In the access area Project: View a list of all load balancer objects and information about them in the selected project: load balancers, rules and HTTP policies, target groups and servers in them, availability checks