Edit user details or permissions

Account and user information is contained in the profile. The set of data in the profile depends on the account type, user type, and role. You can view your profile in the Control panel under Profile and settings.

Account Owner and users with the iam.admin role can view information about all users in the Control panel: IAM → Control panel users and Service users.

The Account Owner and iam.admin can edit user details. Users can edit some details on their own. Not all details can be changed; for details, see the What details can be changed section.

What details can be changed

	Control panel user (login and password)	Control panel user (SSO)	Service user
Name	✗ (you must delete the old user and add a new one)	✗	✓
Login or External ID	—	✗ (not stored in Servercore)	✓
Password	✓ (changed by user)	✗ (not stored in Servercore)	✓
Permissions (scope and role)	✓	✓	✓
Project	✓	✓	✓
Email	✓ (changed by user)	✗	—
Phone number	✓ (changed by user)	—	—
Description	✓	✓	✓
User groups	✓	✓	✓
Notification categories and products	✓	✓	—
Subscription to notification categories	✓ (changed by the user)	✓ (if email is specified)	—
SSH keys	✓	✓	✓
S3 keys	✓	—	✓
ADB keys	✓	✓	✓
Proxy keys	✓	✓	✓

* A user with the iam.admin role cannot change their role, but the Account Owner or another iam.admin can.

To change your phone number, email address, full name, or company details, edit your profile details.

Data for control panel users linked to a federation and authenticated via SSO is not stored in Servercore. Their data can be changed on your identity provider's side.

Edit Account Owner details

If you have a business account, the Account Owner profile lists a contact person — an employee responsible for working with your organization's account. If the responsible employee has changed or their contact details have changed, you can change the full name, phone number, and email address in the Account Owner profile. You cannot change the organization the account is registered to — you can register a new account and transfer services to it.

If you have an individual account, you can change your phone number and email address. Changing the full name is only possible if the Account Owner's full name has changed or contains an error. You cannot specify another person's full name in the Account Owner profile — you can register a new account and transfer services to it.

Change service user name

1. In the Control panel, in the top menu, click IAM.
2. Go to the Service users section.
3. In the user's menu, click Edit.
4. Make changes.
5. Click Save.

Change service user password

1. In the Control panel, in the top menu, click IAM.

2. Go to the Service users section.

3. In the user's menu, click Change password.

4. Enter a new password or click Generate. The password must be at least 20 characters long and include at least:

   • one uppercase and one lowercase Latin letter (A-Z, a-z);
   • one digit (0-9);
   • one special character from the ASCII Printable 7-Bit Special Characters list:
     !"#$%&'()*+,-./:;<=>?@[]^_{|}~.

5. Click Change password.

Edit user description

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the User data block, edit the description.

5. Click Save.

Edit user permissions

You can edit user permissions manually or import permissions from another user.

Edit permissions manually

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. In the user's menu, click Edit.

4. To add a permission, in the Access settings block:

   4.1. Click Add permission.

   4.2. On the permission card, select:

   • access scope. If you selected the Projects access scope, select the desired projects;
   • role. To add users with the member role, the account balance must have funds.

5. To delete a permission, in the Access settings block, on the permission card, click .

6. Click Save.

Import

Imported permissions will replace all other permissions.

1. Make sure you have exported the permissions of another user or group.

2. In the Control panel, in the top menu, click IAM.

3. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

4. In the user's menu, click Edit.

5. In the Access settings block, click Import.

6. Select the permissions file you exported.

7. Click Import.

Edit user projects

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, edit the user's projects.

5. Click Save.

Edit user groups

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, edit the user's groups.

5. Click Save.

Edit notification categories and products for a control panel user

Follow the Manage notification recipients instructions.

Manage user SSH keys

Control panel users, including federated users, can manage their SSH keys independently. Learn more about SSH keys in the Create and place an SSH key on a cloud server instructions.

Add SSH key

A public SSH key can be added to a user profile and then placed when creating a server.

The key will be available in all projects the user is added to.

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, click Add key.

5. Enter the key name.

6. Paste the public SSH key in OpenSSH format.

7. Click Add.

Delete SSH key

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, from the key's menu, select Delete.

5. Click Delete.

Manage user S3 keys

An S3 key is used to work with S3 via API and to work with logs via AWS CLI.

Issue S3 key

Control panel users can issue S3 keys to themselves, but we recommend creating service users and issuing S3 keys to them.

Only the Account Owner or a user with the iam.admin role can issue S3 keys to other users. A service user cannot obtain an S3 key independently because they do not have access to the control panel — the Account Owner or iam.admin must issue a key to them.

You must create a separate key for each project. You can issue multiple keys for a single project.

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the S3 keys block, click Add key.

5. Enter a key name.

6. Select the project for which the key will work.

7. Click Generate. Two values will be generated:

   • Access key — Access Key ID, a key identifier;
   • Secret key — Secret Access Key, a secret key.

8. Click Copy and save the key — it cannot be viewed after closing the window.

Delete S3 key

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the S3 keys block, in the key row, click .

5. Click Delete.

Manage user ADB keys

ADB keys are used to work with Mobile Farm devices. Control panel users, including federated ones, can manage their ADB keys independently. Learn more in the Manage ADB keys section of the Manage access keys instructions.

Add ADB key

A public ADB key can be added to another user's profile, and then that user will be able to use the key to connect to Mobile Farm devices via ADB.

The key will be available in all projects the user is added to.

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, click Add key.

5. Enter the key name.

6. Paste the public ADB key.

7. Click Add.

Delete ADB key

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, in the key row, click .

5. Click Delete.

Manage user Proxy keys

A Proxy key is used for proxying Mobile Farm device traffic.

Issue Proxy key

Control panel users can add Proxy keys for themselves, but we recommend creating service users and issuing Proxy keys to them.

Only the Account Owner or a user with the iam.admin role can issue Proxy keys to other users. A service user cannot obtain a Proxy key independently because they do not have access to the control panel — the Account Owner or an iam.admin must issue the key to them.

The key will be available in all projects the user is added to.

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, click Add key.

5. Enter the key name.

6. Click Generate key.

7. In the Key field, click and save the key in a safe place — you will not be able to view it after closing the window.

Delete Proxy key

1. In the Control panel, in the top menu, click IAM.

2. Go to the section with the desired user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, in the key row, click .

5. Click Delete.