Manage access to colocation equipment

Last update: July 28 2026

Access to colocation equipment is regulated by a role-based model that defines access within an account and project —learn more in the Access Management in Selectel Products guide. You can view the capabilities of roles across all products in the role reference.

member

A user with full access to all Selectel products. Does not have management access for: users, service users, user groups, and federations.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list, creating and managing projects; managing colocation equipment in all projects: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
	In the Project access area: managing colocation equipment in the selected project: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering, canceling); managing private subnets (viewing information, adding, deleting); managing SANs (viewing information, adding, deleting); viewing the list of ordered additional services; connecting and disconnecting additional services
	In the Project access area, network operations are not available

billing

A user with access to manage billing and without access to manage services.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations	Billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; managing balance notifications; managing bank cards; viewing reporting documents; managing the affiliate program and payouts; viewing connected services and service statuses

iam_admin

A user with access to user management and no access to services or billing. Cannot manage their own account, change permissions, manage notifications, or delete a user. The first user with the iam_admin role is created by the Account Owner.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	managing users, service users, user groups with access to colocation equipment, as well as managing federations

reader

A user with access to view everything managed by member in the same access area.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list; viewing the list of colocation equipment and information about it in all projects
	In the Project access area: viewing the list of colocation equipment and information about it in the selected project
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are not available

dedicated.admin

A user with access to manage colocation equipment.

The dedicated.admin role also provides access to manage:

• dedicated servers;
• firewalls;
• basic firewall;
• data storage system;
• network volumes for dedicated servers;
• rented network equipment.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list; managing colocation equipment in all projects: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
	In the Project access area: managing colocation equipment in the selected project: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering, canceling); managing private subnets (viewing information, adding, deleting); managing SANs (viewing information, adding, deleting); viewing the list of ordered additional services; connecting and disconnecting additional services
	In the Project access area, network operations are not available

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same access area.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the list of colocation equipment and information about it in all projects
	In the Project access area: viewing the list of colocation equipment and information about it in the selected project
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are not available