Manage access to leased network equipment

Last update: May 30 2026

Access to leased network equipment is governed by a role model that defines access within an account; for more details, see the Access Management in Selectel Products guide. You can view the capabilities of roles across all products in the Role Reference.

member

A user with full access to all Selectel products. Cannot manage: users, service users, user groups and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: network equipment management: ordering network equipment; modifying network equipment; canceling network equipment
	In the Project access scope, operations with leased network equipment are unavailable

billing

A user with access to billing management but without access to service management.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; management of balance notifications; management of bank cards; viewing reporting documents; management of affiliate program and funds withdrawal; viewing connected services and service statuses

iam.admin

A user with access to manage users, but without access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	manage users, service users, user groups with access to leased network equipment, as well as manage federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations	view users, service users, user groups and federations; viewing user keys; view notifications of other users; viewing account access restrictions

reader

A user with access to view everything managed by member in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: viewing the list of leased network equipment and information about it
	In the Project access scope, operations with leased network equipment are unavailable

dedicated.admin

A user with access to storage management.

The dedicated.admin role also provides access to manage:

• dedicated servers;
• colocation;
• firewalls;
• basic firewall;
• network volumes for dedicated servers;
• leased network equipment.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: network equipment management: ordering network equipment; modifying network equipment; canceling network equipment
	In the Project access scope, operations with leased network equipment are unavailable

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with leased network equipment	In the Account access scope: viewing the list of leased network equipment and information about it
	In the Project access scope, operations with leased network equipment are unavailable