Skip to main content

Manage access to cloud servers and flavors

Last update:

Access to cloud servers and flavors is governed by a role model that defines access within an account and a project.Read more in the Access Management in Selectel Products tutorial .

member

User with full access to all services.Does not have access to manage: users, service users, user groups and federations.

Access areas
  • Account;
  • project
Who can be prescribed
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • Add and disable private and public IP addresses;
    • Adding and removing cloud server ports;
    • Adding and removing security groups;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling IP addresses, public IP addresses;
    • Adding and removing cloud server ports;
    • Adding and removing security groups;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

reader

A user with access to view everything he controls member in the same access area.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

billing

User with access to billing management and without access to service management.

Access areasAccount
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available cloud server operations
  • Billing management

iam.admin

User with access to user management and without access to services and billing.Cannot manage his account: change permissions, manage notifications, delete the user.The first user with the iam.admin role is created by the Account Owner.

Access areasAccount
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

iam.viewer

A user with access to view everything they manage iam.admin.

Access areasAccount
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

compute.admin

User with access to manage cloud servers, flavors and placement groups.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • Suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • cloud server creation;
    • changing cloud server configurations;
    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers;
    • cloud server imaging;
    • connect and disconnect network disks to cloud servers;
    • Turning cloud servers on and off;
    • Enable or disable Cloud Server Rescue mode;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;
    • suspension and freezing of cloud servers;
    • Resuming cloud servers after a suspension or freeze;
    • recreating cloud servers;
    • Recovery of cloud servers after soft-mode deletion;
    • cloud server deletion;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal;

  • view the list of placement groups and information about them: group name, placement policy condition;

  • management of accommodation groups:

    • creation of placement groups;
    • deletion of allocation groups

* Except for the role compute.admin user must have a role with access to manage the cloud platform's cloud platform networks.

compute.viewer

User with access to view cloud servers, flavors and placement groups.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • Syslog view;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • Syslog view;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • view the list of SSH keys and information about them;
  • View the list of placement groups and information about them: group name, placement policy condition

compute.server.user

User with access to cloud server management.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers *;
    • creating cloud server images *;
    • connecting and disconnecting network disks to cloud servers *;
    • Turning cloud servers on and off;
    • Enable and disable Rescue mode of cloud servers *;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);

  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;

  • View cloud server statistics;

  • cloud server management:

    • changing the OS administrator password;
    • adding and disabling private and public IP addresses *;
    • adding and removing cloud server ports *;
    • adding and removing security groups *;
    • creating backups of cloud servers *;
    • creating cloud server images *;
    • connecting and disconnecting network disks to cloud servers *;
    • Turning cloud servers on and off;
    • Enable and disable Rescue mode of cloud servers *;
    • Adding and removing cloud server tags;
    • Adding and removing cloud servers from the placement group;

  • console use;

  • Syslog view;

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • view the list of SSH keys and information about them;

  • SSH key management:

    • creating or importing SSH keys;
    • SSH key removal

* In addition to the compute.server.user role, the user must have a role with access to manage cloud platform networks, network disks, images, and backups.

compute.server.viewer

User with access to view cloud servers.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • Syslog view;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas, changed quota values and used quotas);
  • View a list of cloud servers and information about them: server type, configuration type, number of vCPUs, memory size, attached disks, security groups, network settings, tags;
  • View cloud server statistics;
  • Syslog view;
  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;
  • View the list of SSH keys and information about them

compute.flavor.admin

User with access to cloud server flavor management.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas);

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas);

  • view the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size;

  • flavor management:

    • creating private flavors;
    • configuring access to flavors in projects;
    • flavor removal;

  • View the list of SSH keys and information about them

compute.flavor.viewer

User with access to view cloud server flavors.No access to other products.

Access areas
  • Account;
  • Project
To whom can be assigned
  • Users;
  • to service users;
  • user groups
Available operations with cloud servers and flavors

In the Account access area:

  • view quotas of all projects (default quotas);
  • View the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size.
  • View the list of SSH keys and information about them

In the access area Project:

  • view project quotas (default quotas);
  • View the list of flavors and information about them: flavor name, number of vCPUs, RAM and local disk size.
  • View the list of SSH keys and information about them