---
title: "Manage access to mobile farm devices"
sidebar_label: "Manage access to devices"
sidebar_position: 2
description: "How access to mobile farm devices is governed by a role model"
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import {TabItemLabel} from '@selectel/docux/components'
import {CustomTable} from '@selectel/docux/components'

# Manage access to mobile farm devices

Access to mobile farm devices is governed by a role model that defines access within an account and [project](/access-control/projects/about-projects.mdx). Read more in the [Access Control in Selectel Products](/access-control/access-management.mdx) guide.

## member \{#member}

User with full access to all services. Does not have management access to: [users](/access-control/manage/), [service users](/access-control/user-types.mdx#service-users), [user groups](/access-control/groups/) and [federations](/access-control/federations/).

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access levels</th>

        <td>
          <ul>
            <li>Account;</li><li>Project</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations in mobile farm</th>

        <td>
          In the Account access level:

          <ul>
            <li>viewing mobile farm consumption in all account projects;</li><li>using mobile farm devices in all account projects;</li><li>adding and removing mobile farm devices in all account projects;</li><li>changing [pricing](/mobile-farm/about/payment.mdx#billing-options) for mobile farm devices in all account projects;</li><li>adding ADB and Proxy keys to your profile;</li><li>changing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>

      <tr>
        <td>
          In the Project access scope:

          <ul>
            <li>viewing mobile farm consumption in your project;</li><li>using mobile farm devices in your project;</li><li>adding and removing mobile farm devices in your project;</li><li>changing [pricing](/mobile-farm/about/payment.mdx#billing-options) for mobile farm devices in your project;</li><li>adding ADB and Proxy keys to your profile;</li><li>changing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## billing \{#billing}

User with access to billing management and no access to service management.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Account</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>Billing management;</li><li>viewing mobile farm consumption</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## iam.admin \{#iam-admin}

User with access to user management but no access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the `iam.admin` role  is created by the [Account Owner](/access-control/user-types.mdx#account-owner).

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Account</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>Managing [panel users](/access-control/user-types.mdx#panel-users), [service users](/access-control/user-types.mdx#service-users), [user groups](/access-control/groups/), and [federations](/access-control/federations/);</li><li>adding ADB and Proxy keys for other users;</li><li>adding ADB and Proxy keys to your profile</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## iam.viewer \{#iam-viewer}

A user with access to view everything that [iam.admin](#iam-admin) manages.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Account</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>Viewing [panel users](/access-control/user-types.mdx#panel-users), [service users](/access-control/user-types.mdx#service-users), [user groups](/access-control/groups/), and [federations](/access-control/federations/);</li><li>viewing ADB and Proxy keys of other users;</li><li>adding ADB and Proxy keys to your profile;</li><li>viewing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## reader \{#reader}

User with access to view everything that [`member`](#member) manages in the same access scope.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th>

        <td>
          <ul>
            <li>Account;</li><li>Project</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations in mobile farm</th>

        <td>
          In the Account access scope:

          <ul>
            <li>View mobile farm consumption in all account projects;</li><li>adding ADB and Proxy keys to your profile</li><li>viewing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>

      <tr>
        <td>
          In the Project access scope:

          <ul>
            <li>View mobile farm consumption in your project;</li><li>adding ADB and Proxy keys to your profile</li><li>viewing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## mobile\_farm.admin \{#mobile-farm-admin}

User with full access to manage the mobile farm in their project. Does not have access to the mobile farm in other projects or to other products in their project.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Project</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>View mobile farm consumption;</li><li>adding and removing mobile farm devices;</li><li>using mobile farm devices;</li><li>changing [pricing](/mobile-farm/about/payment.mdx#billing-options) for mobile farm devices;</li><li>adding ADB and Proxy keys to your profile</li><li>changing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## mobile\_farm.user \{#mobile-farm-user}

User with access to use mobile farm devices in their project. Does not have access to the mobile farm in other projects or to other products in their project.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Project</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>View mobile farm consumption;</li><li>using mobile farm devices;</li><li>adding ADB and Proxy keys to your profile</li><li>viewing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## mobile\_farm.viewer \{#mobile-farm-viewer}

User with access to view mobile farm devices and consumption in their project. Does not have access to the mobile farm in other projects or to other products in their project.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access scopes</th><td>Project</td>
      </tr>

      <tr>
        <th>Can be assigned to</th>

        <td>
          <ul>
            <li>Users;</li><li>service users;</li><li>user groups</li>
          </ul>
        </td>
      </tr>

      <tr>
        <th>Available operations in mobile farm</th>

        <td>
          <ul>
            <li>View mobile farm consumption;</li><li>viewing mobile farm devices;</li><li>adding ADB and Proxy keys to your profile</li><li>viewing mobile farm firewall rules</li>
          </ul>
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

<Formbricks />