Access management

Written by

Access to Billing
Billing account access
Billing account roles
Adding a user
Assigning roles
Revoking a role

Access to Billing

Access to the Billing service is provided to users with a registered Yandex or Yandex.Connect account:

If an account hasn't been created for you or your employee yet, create it in Yandex or Yandex.Connect.
If you use a social network profile to log in to Yandex, create a username and password.

Your phone number must be linked to this account. For detailed instructions, see the Help for Yandex ID and Yandex.Connect.

Billing account access

Billing account access is provided through the Billing service. The operations that a user can perform on a billing account are determined by the role assigned to them.

Note

Access can only be granted to users who were added to a cloud in Identity and Access Management.

Billing account roles

Billing has the following roles:

Service roles

Primitive roles

Service roles are roles that provide access to cloud Billing:

billing.accounts.member is granted automatically when you add a user to Billing.
All users except billing account owners require this role to access cloud Billing. This role doesn't allow you to perform any actions with the billing account and is only used in combination with the viewer and editor role.
billing.accounts.owner is automatically granted when you create a billing account and can't be reassigned to another user. The role lets you perform any action with the billing account.

Primitive roles are roles that provide access to a cloud billing account:

viewer is granted by a billing account owner and lets a user view some billing account information.
editor is granted by a billing account owner and lets a user view and edit some billing account information.
admin is granted by a billing account owner and lets a user view and edit some billing account information as well as assign and revoke additional user privileges.

Primitive roles can only be assigned to users in the Users list.

A list of operations available to each role is given in the table below.

Operations	`member`	`owner`	`viewer`	`editor`	`admin`
Activate the trial period
Activate the paid version
Check expenses
Access usage details
Activate promo codes
Top up your personal account using a bank card
Top up your personal account using a bank account
View billing account information
Rename a billing account
Change payer contact information
Change billing details
Change bank cards
Change payment methods
Assign roles to billing accounts
View and edit roles
Link clouds to billing accounts
Create budget
View and receive usage notifications

Adding a user

The owner of a billing account can expand the Users list to include any Yandex.Cloud user with the billing.accounts.member role to the cloud that is linked to the billing account. To add a user:

In the management console, click in the upper left-hand corner of the page, and go to Billing.
Select an account on the List of accounts page.
Go to Access control.
Click Add user.
Enter your Yandex ID or Yandex.Connect login. The drop-down list will display the users who meet the search conditions. Select the one you need.
Click Add.

The user with the specified username is assigned the billing.accounts.member role and added to the Users list. To grant billing account access, assign the user the desired role.

Assigning roles

The owner can grant access to the billing account to any user on the Users list. To do this:

In the management console, click in the upper left-hand corner of the page, and go to Billing.
Go to Access control.
Find the user in the list.
Click and select Configure roles.
Click Assign role.
Select a role from the list. The role is assigned without expiration.

Revoking a role

The billing account owner can revoke roles from users on the list at any time. To do this:

In the management console, click in the upper left-hand corner of the page, and go to Billing.
Go to Access control.
Find the user in the list.
Click and select Configure roles.
Click . The role is revoked.