Manage access to a global router

Last update: October 05 2026Open in Markdown

Access to the global router is governed by a role model that determines access within an account and a project. For more information, see the Access management in Selectel products instructions.

member

User with full access to all services. Does not have access to managing: users, service users, user groups, and federations.

Access scopes	Account; Project
Can be assigned to	Users; service users; user groups
Available operations with a global router	In the Account access scope: Viewing a list of global routers, networks and subnets connected to them, and a list of static routes on the router; creating, modifying, and deleting global routers; adding, modifying, and deleting static routes on a global router; renaming networks and subnets connected to a global router; connecting an existing or new cloud platform network and subnet to a global router; connecting an existing or new dedicated server network and subnet to a global router; deleting a cloud platform network or subnet from a global router network, including deleting the cloud platform network or subnet itself; deleting a dedicated server network or subnet from a global router network
	In the Project access scope, operations with a global router are not available

iam.admin

User with access to user management and no access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Can be assigned to	Users; service users; user groups
Available operations with a global router	Managing control panel users, service users, user groups with access to the global router, as well as managing federations

iam.viewer

User with access to view everything managed by iam.admin.

Access scopes	Account
Can be assigned to	Users; service users; user groups
Available operations with a global router	Viewing control panel users, service users, user groups with access to the global router, as well as viewing federations

reader

User with access to view everything managed by member within the same access scope.

Access scopes	Account; Project
Can be assigned to	Users; service users; user groups
Available operations with a global router	In the Account access scope: viewing a list of global routers, connected networks and subnets, and a list of static routes on the router
	In the Project access scope, operations with a global router are not available

global_router.admin

User with access to manage global routers in the account. Does not have access to other products.

Access scopes	Account
Can be assigned to	Users; service users; user groups
Available operations with a global router	Viewing a list of global routers, networks and subnets connected to them, and a list of static routes on the router; creating, modifying, and deleting global routers; adding, modifying, and deleting static routes on a global router; renaming networks and subnets connected to a global router. For other operations with global router networks, the member role is additionally required (Project or Account access scope): connecting an existing or new cloud platform network and subnet to a global router; connecting an existing or new dedicated server network and subnet to a global router; deleting a cloud platform network or subnet from a global router network, including deleting the cloud platform network or subnet itself; deleting a dedicated server network or subnet from a global router network

global_router.viewer

User with access to view global routers and their networks. Does not have access to other products.

Access scopes	Account
Can be assigned to	Users; service users; user groups
Available operations with a global router	Viewing a list of global routers, networks and subnets connected to them, and a list of static routes on the router