Manage access to hosted equipment

Last update: May 10 2026

Access to hosted equipment is governed by a role model that defines access within an account and a projectFor more information, see the Access Management in Selectel products.You can see the role capabilities within all products in the Role Reference Guide.

member

User with full access to all Selectel products.No access to manage: users, service users, user groups and federations.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available operations with placed equipment	In the Account access area: view the list of projects, create and manage projects; management of placed equipment in all projects: ordering the placement of equipment; change of hosted equipment (transfer of servers between projects, change of tariff plan, change of traffic consumption model, etc.); refusal to place equipment; activation and deactivation of additional services
	In the access area Project: management of the placed equipment in the selected project: ordering the placement of equipment; change of hosted equipment (transfer of servers between projects, change of tariff plan, change of traffic consumption model, etc.); refusal to place equipment; activation and deactivation of additional services
Available network operations	In the Account access area: View information about all VLANs; management of public subnets (view information, order, refuse); private subnets management (view information, add, delete); SAN management (view information, add, delete); viewing the list of ordered additional services; activation and deactivation of additional services
	In the access area Project grid operations are not available

billing

User with access to billing management and without access to service management.

Access areas	Account
Who can be prescribed	Users; to service users; user groups
Available operations	Billing Management: replenishment of balance and transfer of funds between balances; management of auto-account, monthly payments, payment deferrals; balance notification management; bank card management; viewing of reporting documents; managing the affiliate program and withdrawal of funds; View connected services and service statuses

iam_admin

User with access to user management and without access to services and billing.Cannot manage his account: change permissions, manage notifications, delete user.The first user with the iam_admin role is created by the Account Owner.

Access areas	Account
Who can be prescribed	users; to service users; user groups
Available operations with placed equipment	management of users, service users, user groups with access to hosted equipment, and management of federations

reader

A user with access to view everything he controls member in the same access area.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available operations with placed equipment	In the Account access area: view the list of projects; viewing the list of placed equipment and information about it in all projects
	In the access area Project: viewing the list of placed equipment and information about it in the selected project
Available network operations	In the Account access area: View information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the access area Project network operations are not available

dedicated.admin

User with access to control the hosted equipment.

The dedicated.admin role also gives management access:

• dedicated servers;
• firewalls;
• a basic firewall;
• data storage system;
• network disks for dedicated servers;
• with rented network equipment.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available operations with placed equipment	In the Account access area: view the list of projects; management of placed equipment in all projects: ordering the placement of equipment; change of hosted equipment (transfer of servers between projects, change of tariff plan, change of traffic consumption model, etc.); refusal to place equipment; activation and deactivation of additional services
	In the access area Project: management of the placed equipment in the selected project: ordering the placement of equipment; change of hosted equipment (transfer of servers between projects, change of tariff plan, change of traffic consumption model, etc.); refusal to place equipment; activation and deactivation of additional services
Available network operations	In the Account access area: View information about all VLANs; management of public subnets (view information, order, refuse); private subnets management (view information, add, delete); SAN management (view information, add, delete); viewing the list of ordered additional services; activation and deactivation of additional services
	In the access area Project network operations are not available

dedicated.viewer

User with access to view everything he manages dedicated.admin in the same access area.

Access areas	account; project
Who can be prescribed	users; to service users; user groups
Available operations with placed equipment	In the Account access area: viewing the list of placed equipment and information about it in all projects
	In the access area Project: viewing the list of placed equipment and information about it in the selected project
Available network operations	In the Account access area: View information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the access area Project network operations are not available