Managing access to Billing
Access to Billing
Access to the Billing service is provided to users with a registered Yandex or Yandex 360 account:
- If an account hasn't been created for you or your employee yet, create it in Yandex or Yandex 360.
- If you use a social network profile to log in to Yandex, create a username and password.
Your phone number must be linked to this account. For detailed instructions, see the Help for Yandex ID and Yandex 360.
Billing account access
Billing account access is provided through the Billing service. The operations that a user can perform on a billing account are determined by the role assigned to them.
Note
Access can only be granted to users who were added to a cloud in Identity and Access Management.
Billing account roles
Billing has the following roles:
Service roles are roles that provide access to cloud Billing:
billing.accounts.member
is automatically issued when a user is added to Billing.
All users except billing account owners require this role to access cloud Billing. This role doesn't allow you to perform any actions with the billing account and is only used in combination with theviewer
andeditor
role.billing.accounts.owner
is automatically issued when you create a billing account and can't be reassigned to another user. The role lets you perform any action with the billing account.
Primitive roles are roles that provide access to a cloud billing account:
viewer
is issued by the owner of the billing account and lets the user view billing account information.editor
is issued by the owner of the billing account and lets the user view and edit billing account information.admin
is granted by a billing account owner and lets a user view and edit some billing account information as well as assign and revoke additional user privileges.
Primitive roles can only be assigned to users in the Users list.
A list of operations available to each role is given in the table below.
Operations | member |
owner |
viewer |
editor |
admin |
---|---|---|---|---|---|
Activate the trial period | |||||
Activate the paid version | |||||
Check expenses | |||||
Access usage details | |||||
Activate promo codes | |||||
Topping up your personal account using a bank card | |||||
Topping up your personal account using a bank account | |||||
View billing account information | |||||
Renaming a billing account | |||||
Change payer contact information | |||||
Change billing details | |||||
Change bank cards | |||||
Change payment methods | |||||
Assign roles to billing accounts | |||||
View and edit roles | |||||
Link clouds to billing accounts | |||||
Create details export | |||||
Create budget | |||||
Viewing and receiving usage notifications | |||||
Viewing and downloading reporting (closing) documents | |||||
Viewing and downloading generated reconciliation reports | |||||
Generating a new reconciliation report | |||||
Resource allocation |
Adding a user
A billing account owner can add any Yandex Cloud user to the Users list. To add a user:
- Open the Yandex Cloud management console.
- In the upper-left corner, click All services.
- Select
Billing. - Select an account on the Accounts page.
- Go to Access control.
- Click Add user.
- Enter the Yandex ID or Yandex 360 account username. The drop-down list will display the users who meet the search conditions. Select the one you need.
- Click Add.
The user with the specified username is assigned the billing.accounts.member
role and added to the Users list. To grant billing account access, assign the user the desired role.
Assigning roles
The owner can grant access to the billing account to any user on the Users list. To do this:
- In the management console, click in the upper-left corner of the page and go to Billing.
- Select an account on the Accounts page.
- Go to Access control.
- Find the user in the list.
- Click
- Click Assign role.
- Select a role from the list. The role is assigned without expiration.
Revoking a role
The billing account owner can revoke roles from users on the list at any time. To do this:
- In the management console, click in the upper-left corner of the page and go to Billing.
- Select an account on the Accounts page.
- Go to Access control.
- Find the user in the list.
- Click
- Click
next to the role to be invoked. The role is revoked.
Note
If the billing.accounts.member
role is revoked in Billing for a user, they won't be able to access the billing account.