Manage access to storage

Last update: May 30 2026

Access to storage is governed by a role model that defines access within the account; for more details, see the Access Management in Selectel Products guide. Capabilities of roles across all products can be found in the Role Reference.

member

A user with full access to all Selectel products. Does not have access to manage: users, service users, user groups and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: storage management: ordering storage; modifying storage; canceling storage
	In the Project access scope, operations with storage are unavailable

billing

A user with access to billing management and no access to service management.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with storage	billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; management of balance notifications; bank card management; viewing reporting documents; management of the partner program and fund withdrawal; viewing connected services and service statuses

iam.admin

A user with access to user management and no access to services or billing. Cannot manage their own account: change permissions, manage notifications, or delete a user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with storage	managing users, service users, user groups with access to storage, as well as managing federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations	viewing users, service users, user groups and federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

reader

A user with access to view everything managed by member in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: viewing the list of storage devices and information about them
	In the Project access scope, operations with storage are unavailable

dedicated.admin

A user with access to storage management.

The dedicated.admin role also provides access to managing:

• dedicated servers;
• colocation;
• firewalls;
• basic firewall;
• network volumes for dedicated servers;
• rented network hardware.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: storage management: ordering storage; modifying storage; canceling storage
	In the Project access scope, operations with storage are unavailable

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: viewing the list of storage devices and information about them
	In the Project access scope, operations with storage are unavailable