Manage access to firewalls

Last update: April 03 2026

Access to firewalls is governed by a role model that defines access within an account, see the Access Control in Selectel Products manual for more information. You can see the role capabilities within all products in the Role Reference Guide.

member

User with full access to all Selectel products. Does not have access to manage: users, service users, user groups and federations.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available firewall operations	In the Account access area: firewall management: ordering firewalls; changing firewalls; refusal to rent a firewall
	Firewall operations are not available in the Project access area

billing

User with access to billing management and without access to service management.

Access areas	Account
Who can be prescribed	users; to service users; user groups
Available firewall operations	billing management: replenishment of balance and transfer of funds between balances; management of auto-account, monthly payments, payment deferrals; balance notification management; bank card management; viewing of reporting documents; managing the affiliate program and withdrawal of funds; View connected services and service statuses

iam.admin

User with access to user management and without access to services and billing. Cannot manage his account: change permissions, manage notifications, delete the user. The first user with the iam.admin role is created by the Account Owner.

Access areas	Account
Who can be prescribed	users; to service users; user groups
Available firewall operations	managing users, service users, user groups with firewall access, and managing federations

iam.viewer

A user with access to view everything that iam.admin manages.

Access areas	Account
Who can be prescribed	users; to service users; user groups
Available operations	view users, service users, user group and federations; view user keys; View other users' notifications; view account access restrictions

reader

A user with access to view everything he controls member in the same access area.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available firewall operations	In the Account access area: View a list of firewalls and information about them
	Firewall operations are not available in the Project access area

dedicated.admin

A user with access to firewall management.

The dedicated.admin role also gives management access:

• dedicated servers;
• with the equipment that's been placed;
• a basic firewall;
• data storage system;
• network disks for dedicated servers;
• with rented network equipment.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available firewall operations	In the Account access area: firewall management: ordering firewalls; changing firewalls; refusal to rent a firewall
	Firewall operations are not available in the Project access area

dedicated.viewer

User with access to view everything he manages dedicated.admin in the same access area.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available firewall operations	In the Account access area: View a list of firewalls and information about them
	Firewall operations are not available in the Project access area