Manage access to leased network equipment

Last update: July 21 2026

Access to rented network equipment is regulated by a role-based model that defines access within an account, for more details see the instructions Access Control in Selectel Products. You can view the capabilities of roles within all products in the role reference.

member

A user with full access to all Selectel products. Does not have management access to: users, service users, user groups and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: network equipment management: ordering network equipment; modifying network equipment; canceling network equipment
	In the Project access scope, operations with leased network equipment are unavailable

billing

A user with access to billing management but without access to service management.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; management of balance notifications; management of bank cards; viewing reporting documents; management of affiliate program and funds withdrawal; viewing connected services and service statuses

iam.admin

A user with access to user management and no access to services or billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	manage users, service users, user groups with access to leased network equipment, as well as manage federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations	view users, service users, user groups and federations; viewing user keys; view notifications of other users; viewing account access restrictions

reader

A user with access to view everything managed by member in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: viewing the list of leased network equipment and information about it
	In the Project access scope, operations with leased network equipment are unavailable

dedicated.admin

A user with access to storage management.

The dedicated.admin role also provides access to manage:

• dedicated servers;
• colocation;
• firewalls;
• basic firewall;
• network volumes for dedicated servers;
• leased network equipment.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: network equipment management: ordering network equipment; modifying network equipment; canceling network equipment
	In the Project access scope, operations with leased network equipment are unavailable

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: viewing the list of leased network equipment and information about it
	In the Project access scope, operations with leased network equipment are unavailable