[Yandex Cloud documentation](../../index.md) > [Yandex Identity and Access Management](../index.md) > FAQ > All questions on one page

# Questions and answers about Identity and Access Management

## General questions {#general-questions}

# General questions about Identity and Access Management

#### What is the service used for Yandex Identity and Access Management? {#usage}

The IAM service controls access to resources and lets you configure access rights. You determine who should have rights for a certain resource and what these rights are, while IAM grants access according to the assigned rights.

IAM allows you to:
* Manage access permissions for resources by assigning and revoking roles.
* Create [service accounts](../concepts/users/service-accounts.md). This is a special account used for managing resources Yandex Cloud via the API.
* Get an IAM token for API authentication.

Other Yandex Cloud services use the API IAM to give you more control over access to their resources. For example, Yandex Compute Cloud additionally provides the `compute.images.user` role to control access to disk images.

#### How do I get started with IAM? {#start}

To start working with IAM, you need to register with Yandex Cloud. After registration, you will be able to use the features IAM.

#### How much does it cost to use the serviceIAM? {#price}

Using IAM is free of charge.

#### Can I get logs of my operations in Yandex Cloud? {#logs}

Yes, you can request information about operations with your resources from Yandex Cloud logs. Do it by contacting [support](https://center.yandex.cloud/support).

## Logging in and accessing resources {#log-in-and-access}

# Logging in and accessing resources

#### How do I log in to the management console? {#console-log-in}

Go to the [management console page](https://console.yandex.cloud).

If not logged in to your Yandex or Yandex 360 account yet, click **Log in**. If you do not have an account yet, click **Register**. For more information, see (https://yandex.com/support/passport/auth.html).

#### How are access permissions verified? {#verifying-rights}

Before performing an operation with a resource, such as creating a VM, IAM checks whether the user has all the required permissions. If the user doesn't have any of the permissions, the operation isn't performed and Yandex Cloud returns an error. For more information, see [How access management works in Yandex Cloud](../concepts/access-control/index.md).

#### What is a resource? {#resource}

A _resource_ is a Yandex Cloud entity that you can perform operations with, such as creating, updating, viewing, or deleting it. Examples of resources: VMs, disks, service accounts, clouds, and folders. For more information, see the [Yandex Cloud resource hierarchy](../../resource-manager/concepts/resources-hierarchy.md) section of the Resource Manager documentation.