Access management

Billing access

Access to the Billing service is provided to users with a registered Yandex.Passport or Yandex.Connect account:

Your phone number must be linked to this account. For detailed instructions, see the Help for Yandex.Passport and Yandex.Connect.

Billing account access

Billing account access is provided through the Billing service. The operations that a user can perform on a billing account are determined by the role assigned to them.

Note

Access can only be granted to users who were added to a cloud in Identity and Access Management.

Billing account roles

Billing has the following roles:

Service roles are roles that provide access to cloud Billing:

  • billing.accounts.member is automatically issued when a user is added to Billing.
    All users except billing account owners require this role to access cloud Billing. This role doesn't allow you to perform any actions with the billing account and is only used in combination with the viewer and editor role.
  • billing.accounts.owner is automatically issued when you create a billing account and can't be reassigned to another user. The role lets you perform any action with the billing account.

Primitive roles are roles that provide access to the cloud billing account:

  • viewer is issued by the owner of the billing account and lets the user view billing account information.
  • editor is issued by the owner of the billing account and lets the user view and edit billing account information.
  • admin is issued by the owner of the billing account and lets the user view and edit billing account information, assign and revoke the roles of other user.

Primitive roles can only be assigned to users in the Users list.

A list of operations available to each role is given in the table below.

Operations member owner viewer editor admin
Activate the trial period image image image image image
Activate the paid version image image image image image
Check expenses image image image image image
Access usage details image image image image image
Activate promo codes image image image image image
Top up balance image image image image image
View billing account information image image image image image
Rename billing account image image image image image
Change payer contacts image image image image image
Change billing details image image image image image
Change bank cards image image image image image
Change payment methods image image image image image
Assign roles to billing accounts image image image image image
View and edit roles image image image image image
Link clouds to billing accounts image image image image image

Adding users

The billing account owner can add any Yandex.Cloud user to the Users list. To add a user:

  1. In the management console, click image and go to Billing.
  2. Go to Access management.
  3. Click Add user.
  4. Enter a Yandex.Passport or Yandex.Connect username.
    Usernames that match the search are displayed in the list. Select the appropriate one.
  5. Click Add.

The user with the specified username is assigned the billing.accounts.member role and added to the Users list. To grant billing account access, assign the user the desired role.

Assigning roles

The owner can grant billing account access to any user who was added to the list and granted the billing.accounts.member role. To do this:

  1. In the management console, click image and go to Billing.
  2. Go to Access management.
  3. Find the user in the list.
  4. Click image and select Configure roles.
  5. Click Assign role.
  6. Select a role from the list. The role is assigned without expiration.

Revoking roles

The billing account owner can revoke roles from users on the list at any time. To do this:

  1. In the management console, click image and go to Billing.
  2. Go to Access management.
  3. Find the user in the list.
  4. Click image and select Configure roles.
  5. Click image next to the role you want to revoke. The role is revoked.

Note

If the billing.accounts.member role is revoked in Billing for a user, they won't be able to access the billing account.