---
title: "Manage access to colocation equipment"
sidebar_label: "Manage access to colocation equipment"
sidebar_position: 3
description: "How access to colocation equipment is governed by a role model"
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import {TabItemLabel} from 'docs-kit/components'
import {CustomTable} from 'docs-kit/components'

# Manage access to colocation equipment

Access to colocation equipment is regulated by a role-based model that defines access within an account and [project](/access-control/projects/about-projects.mdx) —learn more in the [Access Management in Selectel Products](/access-control/access-management.mdx) guide. You can view the capabilities of roles across all products in the [role reference](/access-control/role-reference.mdx).

## member \{#member}

A user with full access to all Selectel products. Does not have management access for: [users](/access-control/manage/), [service users](/access-control/user-types.mdx#service-users), [user groups](/access-control/groups/), and [federations](/access-control/federations/).

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th>

        <td>
          * account;
          * project
        </td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations with colocation equipment</th>

        <td>
          In the Account access area:

          * viewing the project list, creating and managing projects;

          * managing colocation equipment in all projects:

            * ordering colocation;
            * modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.);
            * canceling colocation;

          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area:

          * managing colocation equipment in the selected project:

            * ordering colocation;
            * modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.);
            * canceling colocation;

          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available network operations</th>

        <td>
          In the Account access area:

          * viewing information about all VLANs;
          * managing public subnets (viewing information, ordering, canceling);
          * managing private subnets (viewing information, adding, deleting);
          * managing SANs (viewing information, adding, deleting);
          * viewing the list of ordered additional services;
          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area, network operations are not available
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## billing \{#billing}

A user with access to manage billing and without access to manage services.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th><td>Account</td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th>Available operations</th>

        <td>
          * Billing management:

            * balance top-ups and transferring funds between balances;
            * management of autobills, monthly payments, payment deferrals;
            * managing balance notifications;
            * managing bank cards;
            * viewing reporting documents;
            * managing the affiliate program and payouts;

          * viewing connected services and service statuses
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## iam\_admin \{#iam-admin}

A user with access to user management and no access to services or billing. Cannot manage their own account, change permissions, manage notifications, or delete a user. The first user with the `iam_admin` role is created by the [Account Owner](/access-control/user-types.mdx#account-owner).

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th><td>Account</td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th>Available operations with colocation equipment</th>

        <td>
          * managing [users](/access-control/user-types.mdx#users), [service users](/access-control/user-types.mdx#service-users), [user groups](/access-control/groups/) with access to colocation equipment, as well as managing [federations](/access-control/federations/)
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## reader \{#reader}

A user with access to view everything managed by [`member`](#member) in the same access area.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th>

        <td>
          * account;
          * project
        </td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations with colocation equipment</th>

        <td>
          In the Account access area:

          * viewing the project list;
          * viewing the list of colocation equipment and information about it in all projects
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area:

          * viewing the list of colocation equipment and information about it in the selected project
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available network operations</th>

        <td>
          In the Account access area:

          * viewing information about all VLANs, public and private subnets, and SANs;
          * viewing the list of ordered services and information about them
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area, network operations are not available
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## dedicated.admin \{#dedicated-admin}

A user with access to manage colocation equipment.

The `dedicated.admin` role also provides access to manage:

* [dedicated servers](/dedicated/);
* [firewalls](/firewalls/);
* [basic firewall](/basic-firewall/);
* [data storage system](/data-storage-system/);
* [network volumes for dedicated servers](/block-storage/);
* [rented network equipment](/network-hardware/).

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th>

        <td>
          * account;
          * project
        </td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations with colocation equipment</th>

        <td>
          In the Account access area:

          * viewing the project list;

          * managing colocation equipment in all projects:

            * ordering colocation;
            * modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.);
            * canceling colocation;

          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area:

          * managing colocation equipment in the selected project:

            * ordering colocation;
            * modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.);
            * canceling colocation;

          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available network operations</th>

        <td>
          In the Account access area:

          * viewing information about all VLANs;
          * managing public subnets (viewing information, ordering, canceling);
          * managing private subnets (viewing information, adding, deleting);
          * managing SANs (viewing information, adding, deleting);
          * viewing the list of ordered additional services;
          * connecting and disconnecting additional services
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area, network operations are not available
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## dedicated.viewer \{#dedicated-viewer}

A user with access to view everything managed by [`dedicated.admin`](#dedicated-admin) in the same access area.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th>Access areas</th>

        <td>
          * account;
          * project
        </td>
      </tr>

      <tr>
        <th>Who can be assigned</th>

        <td>
          * users;
          * service users;
          * user groups
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available operations with colocation equipment</th>

        <td>
          In the Account access area:

          * viewing the list of colocation equipment and information about it in all projects
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area:

          * viewing the list of colocation equipment and information about it in the selected project
        </td>
      </tr>

      <tr>
        <th rowspan="2">Available network operations</th>

        <td>
          In the Account access area:

          * viewing information about all VLANs, public and private subnets, and SANs;
          * viewing the list of ordered services and information about them
        </td>
      </tr>

      <tr>
        <td>
          In the Project access area, network operations are not available
        </td>
      </tr>
    </tbody>
  </table>
</CustomTable>

<Formbricks />