Manage dedicated server access

Last update: October 07 2026Open in Markdown

Access to dedicated servers is governed by a role-based access control model that defines access within an account and a project, for details see the instructions on Access management in Selectel products. Role capabilities across all products can be viewed in the role reference.

member

A user with full access to all Selectel products. Has no access to managing: users, service users, user groups, and federations.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with dedicated servers	In the Account access area: viewing the list of projects, create and manage projects; managing dedicated servers in all projects: ordering a server; modifying a server (managing server power, assigning public and private IP addresses to a server, auto-installing an OS, etc.); deleting a dedicated server; enabling and disabling additional services; viewing the list of SSH keys, adding SSH keys to the storage, and managing added SSH keys
	In the Project access area: managing dedicated servers in the selected project: ordering a dedicated server; modifying a server (managing server power, assigning public and private IP addresses to a server, auto-installing an OS, etc.); deleting a dedicated server; enabling and disabling additional services; viewing the list of SSH keys added to the storage and information about them
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering and deleting a dedicated subnet); managing private subnets (viewing information, adding, deleting); managing SAN networks (viewing information, adding, deleting); viewing the list of ordered additional services; enabling and disabling additional services
	In the Project access area, network operations are unavailable

billing

User with access to billing management and without access to service management.

Access areas	Account
Who can be assigned	Users; service users; user groups
Available operations with dedicated servers	billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; managing balance notifications; managing bank cards; viewing reporting documents; managing the affiliate program and payouts; viewing connected services and service statuses

iam.admin

A user with access to user management and without access to services and billing. Cannot manage their own account: change permissions, manage notifications, delete the user. The first user with the iam.admin role is created by the Account Owner.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations with dedicated servers	manage control panel users, service users, user groups with access to dedicated servers, as well as manage federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations	view panel users, service users, user groups and federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

reader

A user with access to view everything managed by member in the same scope.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with dedicated servers	In the Account access area: viewing the list of projects; viewing the list of dedicated servers and information about them in all projects; viewing the list of SSH keys added to the storage and information about them
	In the Project access area: viewing the list of dedicated servers and information about them in the selected project; viewing the list of SSH keys added to the storage and information about them
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are unavailable

dedicated.admin

User with access to dedicated server management.

The dedicated.admin role also grants access to managing:

• colocated equipment;
• firewalls;
• Basic Firewall;
• storage systems;
• network drives for dedicated servers;
• leased network equipment.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with dedicated servers	In the Account access area: viewing the list of projects; managing dedicated servers in all projects: ordering a server; modifying a server (managing server power, assigning public and private IP addresses to a server, auto-installing an OS, etc.); deleting a dedicated server; enabling and disabling additional services; viewing the list of SSH keys, adding SSH keys to the storage, and managing added SSH keys
	In the Project access area: managing dedicated servers in the selected project: ordering a dedicated server; modifying a server (managing server power, assigning public and private IP addresses to a server, auto-installing an OS, etc.); deleting a dedicated server; enabling and disabling additional services; viewing the list of SSH keys added to the storage and information about them
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering and deleting a dedicated subnet); managing private subnets (viewing information, adding, deleting); managing SAN networks (viewing information, adding, deleting); viewing the list of ordered additional services; enabling and disabling additional services
	In the Project access area, network operations are unavailable

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same scope.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with dedicated servers	In the Account access area: viewing the list of dedicated servers and information about them in all projects; viewing the list of SSH keys added to the storage and information about them
	In the Project access area: viewing the list of dedicated servers and information about them in the selected project; viewing information about SSH keys added to the storage
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are unavailable