Manage access to colocation equipment

Last update: September 07 2026Open in Markdown

Access to hosted hardware is regulated by a role-based model that defines access within an account and a project; see Access management in Selectel products for details. You can view the capabilities of roles across all products in the role reference.

member

A user with full access to all Selectel products. Does not have management access to: users, service users, user groups and federations.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list, creating and managing projects; managing colocation equipment in all projects: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
	In the Project access area: managing colocation equipment in the selected project: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering, canceling); managing private subnets (viewing information, adding, deleting); managing SANs (viewing information, adding, deleting); viewing the list of ordered additional services; connecting and disconnecting additional services
	In the Project access area, network operations are not available

billing

A user with access to manage billing and without access to manage services.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations	Billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; managing balance notifications; managing bank cards; viewing reporting documents; managing the affiliate program and payouts; viewing connected services and service statuses

iam_admin

A user with access to user management who does not have access to services and billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam_admin role is created by the Account Owner.

Access areas	Account
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	managing panel users, service users, user groups with access to colocation equipment, as well as managing federations

reader

A user with access to view everything managed by member in the same access area.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list; viewing the list of colocation equipment and information about it in all projects
	In the Project access area: viewing the list of colocation equipment and information about it in the selected project
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are not available

dedicated.admin

A user with access to manage colocation equipment.

The dedicated.admin role also provides access to manage:

• dedicated servers;
• firewalls;
• basic firewall;
• data storage system;
• network volumes for dedicated servers;
• rented network equipment.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the project list; managing colocation equipment in all projects: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
	In the Project access area: managing colocation equipment in the selected project: ordering colocation; modifying colocation equipment (moving servers between projects, changing the tariff plan, changing the traffic consumption model, etc.); canceling colocation; connecting and disconnecting additional services
Available network operations	In the Account access area: viewing information about all VLANs; managing public subnets (viewing information, ordering, canceling); managing private subnets (viewing information, adding, deleting); managing SANs (viewing information, adding, deleting); viewing the list of ordered additional services; connecting and disconnecting additional services
	In the Project access area, network operations are not available

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same access area.

Access areas	account; project
Who can be assigned	users; service users; user groups
Available operations with colocation equipment	In the Account access area: viewing the list of colocation equipment and information about it in all projects
	In the Project access area: viewing the list of colocation equipment and information about it in the selected project
Available network operations	In the Account access area: viewing information about all VLANs, public and private subnets, and SANs; viewing the list of ordered services and information about them
	In the Project access area, network operations are not available