Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity and Access Management
    • All guides
    • Handling secrets that are available in the public domain
    • Users
    • User groups
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • Publicly available secrets
  • Users
  • User groups
  • Service accounts
  • Identity federations
  • Access policies
  • Roles
  • Authentication
  • Service control
  • Workload identity federations
  1. Step-by-step guides
  2. All guides

Step-by-step guides for Identity and Access Management

Written by
Yandex Cloud
Updated at March 17, 2026
View in Markdown
  • Publicly available secrets
  • Users
  • User groups
  • Service accounts
  • Identity federations
  • Access policies
  • Roles
  • Authentication
  • Service control
  • Workload identity federations

Publicly available secretsPublicly available secrets

  • Processing secrets that have become publicly available

UsersUsers

To learn more about user management, see this Yandex Identity Hub guide.

User groupsUser groups

To learn more about user group management, see this Yandex Identity Hub guide.

Service accountsService accounts

  • Creating a service account
  • Getting a list of the folder's service accounts
  • Updating a service account
  • Assigning roles to a service account
  • Setting up service account access permissions
  • Using impersonation
  • Getting service account info
  • Deleting a service account
  • Getting a service account ID token

Identity federationsIdentity federations

The guides on managing identity federations are now included in the Yandex Identity Hub documentation.

Access policiesAccess policies

  • Getting a list of supported access policy templates
  • Creating an access policy for a resource
  • Viewing access policies created for a resource
  • Deleting an access policy

RolesRoles

  • Assigning roles
  • Viewing assigned roles
  • Revoke a role for a resource

AuthenticationAuthentication

  • Getting an IAM token for a Yandex account
  • Getting an IAM token for a service account
  • Getting an IAM token for a federated account
  • Getting an IAM token for a local user account
  • Reissue an IAM token
  • Getting a list of refresh tokens
  • Revoking a refresh token
  • Managing static access keys
  • Managing API keys
  • Managing authorized keys
  • Creating a temporary access key using Security Token Service

Service controlService control

Note

This feature is at the Preview stage.

  • Getting the status of services
  • Enabling and disabling a service

Workload identity federationsWorkload identity federations

  • Setting up workload identity federations

Was the article helpful?

Previous
How to work with service accounts
Next
Handling secrets that are available in the public domain
© 2026 Direct Cursus Technology L.L.C.