Skip to main content

Manage access to cloud servers and flavors

Last update:

Access to cloud servers and flavors is governed by a role model that defines access within an account and project. For more information, refer to the Access Control in Selectel Products manual.

member

User with full access to all services. Does not have access to manage: users, service users, user groups and federations.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • Add and disable private and public IP addresses;
    • Adding and removing cloud server ports;
    • Adding and removing security groups;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling IP addresses, public IP addresses;
    • Adding and removing cloud server ports;
    • Adding and removing security groups;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

reader

A user with access to view everything he controls member in the same access area.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

billing

User with access to billing management and without access to service management.

Access areasAccount
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available cloud server operations
  • Billing management

iam.admin

User with access to user management and without access to services and billing. Cannot manage his account: change permissions, manage notifications, delete the user. The first user with the iam.admin role is created by the Account Owner.

Access areasAccount
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

iam.viewer

A user with access to view everything they manage iam.admin.

Access areasAccount
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

compute.admin

User with access to manage cloud servers, flavors and placement groups. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • Suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

* Except for the role compute.admin user must have a role with access to manage the cloud platform's cloud platform networks.

compute.viewer

User with access to view cloud servers, flavors, and placement groups. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

compute.server.user

User with access to cloud server management. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers *;
    • creating cloud server images *;
    • connecting and disconnecting network disks to cloud servers *;
    • Turning cloud servers on and off;
    • Enable and disable Rescue mode of cloud servers *;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers *;
    • creating cloud server images *;
    • connecting and disconnecting network disks to cloud servers *;
    • Turning cloud servers on and off;
    • Enable and disable Rescue mode of cloud servers *;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;

  • console use;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal

* Except for the role compute.server.user the user must have a role with access to manage the cloud platform's networks, network disks, images and backups.

compute.server.viewer

User with access to view cloud servers. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • View the list of SSH keys and information about them

compute.flavor.admin

User with access to cloud server flavor management. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas);

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas);

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • View the list of SSH keys and information about them

compute.flavor.viewer

User with access to view cloud server flavors. Does not have access to other products.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas);
  • View the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size.
  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas);
  • View the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size.
  • View the list of SSH keys and information about them