Manage access to File Storage

Last update: October 07 2026Open in Markdown

Access to File Storage is managed by a role model that defines access within an account and a project. For more information, see the Access management across Selectel products instructions.

member

A user with full access to all services. Does not have access to managing: users, service users, user groups, and federations.

Access scopes	account; project
Who can be assigned	for users; service users; user groups
Available operations with File Storage	In the Account access scope: view the list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view access rules for file storages; create and manage file storages; create and manage file storage networks; create and manage access rules
	In the Project access scope: view the list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view access rules for file storages; create and manage file storages; create and manage file storage networks; create and manage access rules

reader

A user with view access to everything managed by member within the same access scope.

Access scopes	account; project
Who can be assigned	for users; service users; user groups
Available operations with File Storage	In the Account access scope: view the list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view access rules for file storages
	In the Project access scope: view the list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view access rules for file storages

billing

User with access to billing management and no access to service management.

Access scopes	Account
Who can be assigned	for users; service users; user groups
Available operations with File Storage	billing management

iam.admin

A user with access to user management and without access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	for users; service users; user groups
Available operations with File Storage	managing control panel users, service users, user groups with access to File Storage; managing federations

iam.viewer

A user with view access to everything managed by iam.admin.

Access scopes	Account
Who can be assigned	for users; for service users; for user groups
Available operations with file storage	viewing control panel users, service users, user groups, and federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

filestorage.admin

User with access to manage file storage. Does not have access to other products.

Access scopes	account; project
Who can be assigned	for users; for service users; for user groups
Available operations with file storage	In the Account access scope: view a list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view file storage access rules; creating and managing file storages *; create and manage access rules
	In the Project access scope: view a list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view file storage access rules; creating and managing file storages *; create and manage access rules

* In addition to the filestorage.admin role, the user must have a role with access to managing Cloud Platform networks to connect the File Storage network.

filestorage.viewer

User with access to view file storage. Does not have access to other products.

Access scopes	account; project
Who can be assigned	for users; for service users; for user groups
Available operations with file storage	In the Account access scope: view a list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view file storage access rules
	In the Project access scope: view a list of all file storages and their details: name, size, storage type and protocol, IP and network name, status; view file storage access rules