Get started
Billing

Managing access to Billing

Written by

Access to Billing

Access to the Billing service is provided to users with a registered Yandex or Yandex 360 account:

Your phone number must be linked to this account. For detailed instructions, see the Help for Yandex ID and Yandex 360.

Billing account access

Billing account access is provided through the Billing service. The operations that a user can perform on a billing account are determined by the role assigned to them.

Note

Access can only be granted to users who were added to a cloud in Identity and Access Management.

Billing account roles

Billing has the following roles:

Service roles are roles that provide access to cloud Billing:

  • billing.accounts.member is automatically issued when a user is added to Billing.
    All users except billing account owners require this role to access cloud Billing. This role doesn't allow you to perform any actions with the billing account and is only used in combination with the viewer and editor role.
  • billing.accounts.owner is automatically issued when you create a billing account and can't be reassigned to another user. The role lets you perform any action with the billing account.

Primitive roles are roles that provide access to a cloud billing account:

  • viewer is issued by the owner of the billing account and lets the user view billing account information.
  • editor is issued by the owner of the billing account and lets the user view and edit billing account information.
  • admin is granted by a billing account owner and lets a user view and edit some billing account information as well as assign and revoke additional user privileges.

Primitive roles can only be assigned to users in the Users list.

A list of operations available to each role is given in the table below.

Operations member owner viewer editor admin
Activate the trial period
Activate the paid version
Check expenses
Access usage details
Activate promo codes
Topping up your personal account using a bank card
Topping up your personal account using a bank account
View billing account information
Renaming a billing account
Change payer contact information
Change billing details
Change bank cards
Change payment methods
Assign roles to billing accounts
View and edit roles
Link clouds to billing accounts
Create details export
Create budget
Viewing and receiving usage notifications
Viewing and downloading reporting (closing) documents
Viewing and downloading generated reconciliation reports
Generating a new reconciliation report
Resource allocation

Adding a user

A billing account owner can add any Yandex Cloud user to the Users list. To add a user:

  1. Open the Yandex Cloud management console.
  2. In the upper-left corner, click All services.
  3. Select Billing.
  4. Select an account on the Accounts page.
  5. Go to Access control.
  6. Click Add user.
  7. Enter the Yandex ID or Yandex 360 account username. The drop-down list will display the users who meet the search conditions. Select the one you need.
  8. Click Add.

The user with the specified username is assigned the billing.accounts.member role and added to the Users list. To grant billing account access, assign the user the desired role.

Assigning roles

The owner can grant access to the billing account to any user on the Users list. To do this:

  1. In the management console, click in the upper-left corner of the page and go to Billing.
  2. Select an account on the Accounts page.
  3. Go to Access control.
  4. Find the user in the list.
  5. Click and select Configure roles.
  6. Click Assign role.
  7. Select a role from the list. The role is assigned without expiration.

Revoking a role

The billing account owner can revoke roles from users on the list at any time. To do this:

  1. In the management console, click in the upper-left corner of the page and go to Billing.
  2. Select an account on the Accounts page.
  3. Go to Access control.
  4. Find the user in the list.
  5. Click and select Configure roles.
  6. Click next to the role to be invoked. The role is revoked.

Note

If the billing.accounts.member role is revoked in Billing for a user, they won't be able to access the billing account.

In this article: