Get started
Billing

Access management

Written by

Billing access

Access to the Billing service is provided to users with a registered Yandex.Passport or Yandex.Connect account:

Your phone number must be linked to this account. For detailed instructions, see the Help for Yandex.Passport and Yandex.Connect.

Billing account access

Billing account access is provided through the Billing service. The operations that a user can perform on a billing account are determined by the role assigned to them.

Note

Access can only be granted to users who were added to a cloud in Identity and Access Management.

Billing account roles

Billing has the following roles:

Service roles are roles that provide access to cloud Billing:

  • billing.accounts.member is automatically issued when a user is added to Billing.
    All users except billing account owners require this role to access cloud Billing. This role doesn't allow you to perform any actions with the billing account and is only used in combination with the viewer and editor role.
  • billing.accounts.owner is automatically issued when you create a billing account and can't be reassigned to another user. The role lets you perform any action with the billing account.

Primitive roles are roles that provide access to the cloud billing account:

  • viewer is issued by the owner of the billing account and lets the user view billing account information.
  • editor is issued by the owner of the billing account and lets the user view and edit billing account information.
  • admin is issued by the owner of the billing account and lets the user view and edit billing account information, assign and revoke the roles of other user.

Primitive roles can only be assigned to users in the Users list.

A list of operations available to each role is given in the table below.

Operations member owner viewer editor admin
Activate the trial period
Activate the paid version
Check expenses
Access usage details
Activate promo codes
Top up balance
View billing account information
Rename billing account
Change payer contacts
Change billing details
Change bank cards
Change payment methods
Assign roles to billing accounts
View and edit roles
Link clouds to billing accounts

Adding users

The billing account owner can add any Yandex.Cloud user to the Users list. To add a user:

  1. In the management console, click and go to Billing.
  2. Select the account on the List of accounts page.
  3. Go to Access management.
  4. Click Add user.
  5. Enter a Yandex.Passport or Yandex.Connect username.
    Usernames that match the search are displayed in the list. Select the appropriate one.
  6. Click Add.

The user with the specified username is assigned the billing.accounts.member role and added to the Users list. To grant billing account access, assign the user the desired role.

Assigning roles

The owner can grant billing account access to any user who was added to the list and granted the billing.accounts.member role. To do this:

  1. In the management console, click and go to Billing.
  2. Go to Access management.
  3. Find the user in the list.
  4. Click and select Configure roles.
  5. Click Assign role.
  6. Select a role from the list. The role is assigned without expiration.

Revoking roles

The billing account owner can revoke roles from users on the list at any time. To do this:

  1. In the management console, click and go to Billing.
  2. Go to Access management.
  3. Find the user in the list.
  4. Click and select Configure roles.
  5. Click next to the role you want to revoke. The role is revoked.

Note

If the billing.accounts.member role is revoked in Billing for a user, they won't be able to access the billing account.

In this article: