Change user data or permissions

Account and user information is contained in the profile. The dataset in the profile depends on the account type, user type, and role. You can view your profile in the control panel under Profile and settings.

The account owner and a user with the iam.admin role can see information about all users in the control panel: IAM → Panel Users and Service Users sections.

The Account Owner and iam.admin can modify user data. Users can modify some data themselves. Not all data can be changed; learn more in the What data can be changed section.

What data can be changed

	Panel user (login and password)	Panel user (SSO)	Service user
Name	✗ (you need to delete the old user and add a new one)	✗	✓
Login or External ID	—	✗ (not stored in Servercore)	✓
Password	✓ (changed by the user)	✗ (not stored in Servercore)	✓
Permissions (scope and role)	✓	✓	✓
Project	✓	✓	✓
Email	✓ (changed by the user)	✗	—
Phone number	✓ (changed by the user)	—	—
Description	✓	✓	✓
User groups	✓	✓	✓
Notification categories	✓	✓	—
SSH keys	✓	✓	✓
S3 keys	✓	—	✓
ADB keys	✓	✓	✓
Proxy keys	✓	✓	✓

* A user with the iam.admin role cannot change their own role, but this can be done by the Account Owner or another iam.admin.

To change the phone number, email address, full name, or company details, edit the profile data.

Data for panel users who are linked to a federation and authenticate via SSO is not stored in Servercore. Their data can be changed on your identity provider side.

Edit Account Owner data

If you have a business account, the Account Owner profile lists a contact person — the employee responsible for working with your organization's account. If the responsible employee changes or their contact details change, you can change the full name, phone number, and email address in the Account Owner profile. You cannot change the organization the account is registered to — you can register a new account and transfer services to it.

If you have an individual account, you can change the phone number and email address. Changing the full name is only possible if the Account Owner's full name has changed or if it contains an error. You cannot specify another person's full name in the Account Owner profile — you can register a new account and transfer services to it.

Edit service user name

1. In the control panel, on the top menu, click IAM.
2. Go to the Service Users section.
3. In the user menu, click Edit.
4. Make the changes.
5. Click Save.

Change service user password

1. In the control panel, click IAM in the top menu.

2. Go to the Service Users section.

3. In the user menu, click Change password.

4. Enter a new password or click Generate. The password must be at least 20 characters long and include at least:

   • one uppercase and one lowercase Latin letter (A-Z, a-z);
   • one digit (0-9);
   • one special character from the ASCII Printable 7-Bit Special Characters list:
     !"#$%&'()*+,-./:;<=>?@[]^_{|}~.

5. Click Change password.

Edit user description

1. In the control panel, click IAM in the top menu.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user menu, click Edit.

4. In the User data block, change the description.

5. Click Save.

Edit user permissions

You can modify user permissions manually or import another user's permissions.

Change permissions manually

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for service users.

3. In the user's menu, click Edit.

4. To add a permission, in the Access settings block:

   4.1. Click Add permission.

   4.2. In the permission card, select:

   • scope. If you selected the Projects scope, select the required projects;
   • role. To add users with the member role, there must be funds on the account balance.

5. To delete a permission, in the Access settings block, in the permission card, click .

6. Click Save.

Import

Imported permissions will replace all other permissions.

1. Make sure you have exported the permissions of another user or group.

2. In the control panel, in the top menu, click IAM.

3. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for service users.

4. In the user's menu, click Edit.

5. In the Access settings block, click Import.

6. Select the permissions file you exported.

7. Click Import.

Change user projects

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, modify the user's projects.

5. Click Save.

Change user groups

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. In the user's menu, click Edit.

4. In the Access settings block, modify the user's groups.

5. Click Save.

Change user notification categories

Use the Account notifications instructions.

Manage user SSH keys

Panel users, including federated users, can manage their SSH keys independently. For more information about SSH keys, see the Create and place an SSH key on a cloud server instructions.

Add SSH key

A public SSH key can be added to a user profile and then placed when creating a server.

The key will be available in all projects where the user is added.

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, click Add key.

5. Enter the key name.

6. Paste the public SSH key in OpenSSH format.

7. Click Add.

Delete SSH key

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the SSH keys block, in the key's menu, select Delete.

5. Click Delete.

Manage user S3 keys

The S3 key is used for working with S3 via API and for working with logs via AWS CLI.

Issue S3 key

Control panel users can generate their own S3 keys, but we recommend creating service users and issuing S3 keys to them.

Only the Account Owner or a user with the iam.admin role can issue S3 keys to other users. A Service User cannot obtain an S3 key independently as they do not have access to the control panel — the key must be issued by the Account Owner or iam.admin.

You must create a separate key for each project. You can issue multiple keys for a single project.

1. In the control panel, click IAM.

2. Go to the section for the required user type:

   • Control panel users — for users with access to the control panel;
   • Service users — for users with programmatic access who do not have access to the control panel.

3. Open the user page → the Access tab.

4. In the S3 keys block, click Add key.

5. Enter a key name.

6. Select the project for which the key will work.

7. Click Generate. Two values will be generated:

   • Access key — Access Key ID, a key identifier;
   • Secret key — Secret Access Key, a secret key.

8. Click Copy and save the key — you will not be able to view it after closing the window.

Delete S3 key

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the S3 keys block, in the key row, click .

5. Click Delete.

Manage user ADB keys

ADB keys are used for working with mobile farm devices. Panel users, including federated users, can manage their ADB keys independently. Learn more in the Manage ADB keys section of the Manage access keys instructions.

Add ADB key

A public ADB key can be added to another user's profile, and that user can then use the key to connect to mobile farm devices via ADB.

The key will be available in all projects where the user is added.

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, click Add key.

5. Enter the key name.

6. Paste the public ADB key.

7. Click Add.

Delete ADB key

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for users with programmatic access without access to the control panel.

3. Open the user page → Access tab.

4. In the ADB keys block, in the key row, click .

5. Click Delete.

Manage user proxy keys

A proxy key is used for proxying traffic of mobile farm devices.

Issue proxy key

Panel users can add proxy keys for themselves, but we recommend creating service users and issuing proxy keys to them.

Only the Account Owner or a user with the iam.admin role can issue proxy keys to other users. A service user cannot obtain a proxy key on their own because they do not have access to the control panel — the key must be issued to them by the Account Owner or an iam.admin.

The key will be available in all projects where the user is added.

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, click Add key.

5. Enter the key name.

6. Click Generate key.

7. In the Key field, click and save the key in a safe place — after closing the window, it cannot be viewed.

Delete proxy key

1. In the control panel, in the top menu, click IAM.

2. Go to the section with the required user type:

   • Panel users — for users with access to the control panel;
   • Service users — for service users.

3. Open the user page → Access tab.

4. In the Proxy keys block, in the key row, click .

5. Click Delete.