Manage access to storage

Access to storage systems is regulated by a role model that defines access within an account; for details, see the Access management in Servercore products instructions. You can view role capabilities across all products in the role reference.

member

A user with full access to all Servercore products. Has no access to managing: users, service users, user groups and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: storage management: ordering storage; modifying storage; canceling storage
	In the Project access scope, operations with storage are unavailable

billing

A user with access to billing management and no access to service management.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with storage	billing management: balance top-ups and transferring funds between balances; management of autobills, monthly payments, payment deferrals; management of balance notifications; bank card management; viewing reporting documents; management of the partner program and fund withdrawal; viewing connected services and service statuses

iam.admin

A user with access to user management and without access to services and billing. Cannot manage their account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with storage	managing control panel users, service users, user groups with access to storage systems, as well as managing federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations	view control panel users, service users, user groups and federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

reader

A user with access to view everything managed by member in the same scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: viewing the list of storage devices and information about them
	In the Project access scope, operations with storage are unavailable

dedicated.admin

A user with access to storage management.

The dedicated.admin role also grants access to managing:

• dedicated servers;
• colocated equipment;
• firewalls;
• basic firewall;
• network drives for dedicated servers;
• leased network equipment.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: storage management: ordering storage; modifying storage; canceling storage
	In the Project access scope, operations with storage are unavailable

dedicated.viewer

A user with access to view everything managed by dedicated.admin in the same scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with storage	In the Account access scope: viewing the list of storage devices and information about them
	In the Project access scope, operations with storage are unavailable