Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
  • Blog
  • Pricing
  • Documentation
Yandex project
© 2025 Yandex.Cloud LLC
Yandex Identity and Access Management
    • Overview
      • Overview
      • Roles
      • System groups
      • Public groups
      • Resources that roles can be assigned for
    • Service access to user resources
    • Identity federations
    • Workload identity federations
    • Quotas and limits
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. Concepts
  2. How access management works
  3. Resources that roles can be assigned for

List of resources you can assign roles for

Written by
Yandex Cloud
Updated at May 5, 2025

Yandex Cloud has various resources for which you can assign, view, and revoke roles.

If you need to grant access to a resource that is not on the list, assign the role for the parent resource it inherits permissions from. For example, Yandex Managed Service for PostgreSQL clusters inherit access permissions from their folder.

The list of resources will vary depending on the Yandex Cloud interface used to assign a role.

Management console and service interfaces
CLI
Terraform
API

Yandex Cloud Billing

  • Billing account

Yandex Cloud Desktop

  • Desktop groups

Yandex Cloud Organization

  • User group
  • Organization

Yandex Compute Cloud

  • VM instance
  • Instance group
  • Dedicated host group
  • VM placement group
  • Non-replicated disk placement group
  • VM disk
  • GPU cluster
  • Image
  • Snapshot schedule
  • Disk snapshot
  • File storage

Yandex Container Registry

  • Registry

Yandex DataLens

  • Workbook
  • Collection

Yandex DataSphere

  • Project
  • Community

Yandex Identity and Access Management

  • Service account

Yandex Key Management Service

  • Symmetric encryption key
  • Asymmetric encryption key pair
  • Asymmetric digital signature key pair

Yandex Lockbox

  • Secret

Yandex Managed Service for YDB

  • YDB DBMS

Yandex MetaData Hub

  • Connection to managed databases in Yandex Connection Manager

Yandex Object Storage

  • Bucket

Yandex Resource Manager

  • Cloud
  • Folder

Yandex SpeechSense

  • Space
  • Project

Yandex WebSQL

  • Saved query
  • Historical query

Yandex API Gateway

  • API gateway

Yandex Audit Trails

  • Trail

Yandex Certificate Manager

  • Custom certificate
  • Let's Encrypt certificate

Yandex Cloud Desktop

  • Desktop groups

Yandex Cloud DNS

  • DNS zone

Yandex Cloud Functions

  • Function

Yandex Cloud Logging

  • Log group
  • Log target

Yandex Cloud Organization

  • User group
  • Organization

Yandex Compute Cloud

  • VM instance
  • Instance group
  • Dedicated host group
  • VM placement group
  • Non-replicated disk placement group
  • VM disk
  • GPU cluster
  • Image
  • Snapshot schedule
  • Disk snapshot
  • File storage

Yandex Container Registry

  • Registry
  • Repository

Yandex Identity and Access Management

  • Service account

Yandex Key Management Service

  • Symmetric encryption key
  • Asymmetric encryption key pair
  • Asymmetric digital signature key pair

Yandex Lockbox

  • Secret

Yandex Managed Service for YDB

  • YDB DBMS
  • YDB DBMS backup

Yandex Resource Manager

  • Cloud
  • Folder

Yandex Serverless Containers

  • Container

Yandex Cloud DNS

  • DNS zone

Yandex Cloud Functions

  • Function

Yandex Cloud Organization

  • User group
  • Organization

Yandex Certificate Manager

  • Custom certificate
  • Let's Encrypt certificate

Yandex Compute Cloud

  • VM instance
  • VM placement group
  • Non-replicated disk placement group
  • VM disk
  • GPU cluster
  • Image
  • Snapshot schedule
  • Disk snapshot
  • File storage

Yandex Container Registry

  • Registry
  • Repository

Yandex DataSphere

  • Project
  • Community

Yandex Identity and Access Management

  • Service account

Yandex Key Management Service

  • Symmetric encryption key
  • Asymmetric encryption key pair
  • Asymmetric digital signature key pair

Yandex Lockbox

  • Secret

Yandex Managed Service for YDB

  • YDB DBMS

Yandex Resource Manager

  • Cloud
  • Folder

Yandex Serverless Containers

  • Container

Yandex API Gateway

  • API gateway

Yandex Audit Trails

  • Trail

Yandex Certificate Manager

  • Custom certificate
  • Let's Encrypt certificate

Yandex Cloud Billing

  • Billing account

Yandex Cloud Desktop

  • Desktop groups

Yandex Cloud DNS

  • DNS zone

Yandex Cloud Functions

  • Function

Yandex Cloud Logging

  • Log group
  • Log target
  • Export

Yandex Cloud Organization

  • User group
  • Organization

Yandex Compute Cloud

  • VM instance
  • Instance group
  • Dedicated host group
  • VM placement group
  • Non-replicated disk placement group
  • VM disk
  • GPU cluster
  • Image
  • Snapshot schedule
  • Disk snapshot
  • File storage

Yandex Container Registry

  • Registry
  • Repository

Yandex DataSphere

  • Project
  • Community

Yandex Identity and Access Management

  • Service account

Yandex Key Management Service

  • Symmetric encryption key
  • Asymmetric encryption key pair
  • Asymmetric digital signature key pair

Yandex Lockbox

  • Secret

Yandex Managed Service for YDB

  • YDB DBMS
  • YDB DBMS backup

Yandex Resource Manager

  • Cloud
  • Folder

Yandex Serverless Containers

  • Container

Was the article helpful?

Previous
Public groups
Next
How to choose the correct authentication method
Yandex project
© 2025 Yandex.Cloud LLC