[Yandex Cloud documentation](../../index.md) > [Yandex Cloud Marketplace](../index.md) > Partners > Access management

# Managing partner access in Marketplace

In this section, you will learn about:
* [Resources supporting role assignment](#resources).
* [Which roles exist in a partner profile](#roles-list).
* [How to add a new user to a partner profile](#add-user).
* [How to assign a role in a partner profile](#assign-role).

## Resources supporting role assignment {#resources}

 In the [Marketplace partner dashboard](https://partners.yandex.cloud/), you can [assign a role](#assign-role) to [Marketplace products](../concepts/product.md) and to a [partner profile](../concepts/publisher.md).

## Roles this service has {#roles-list}

### Service roles {#service-roles}

#### marketplace.meteringAgent {#marketplace-meteringagent}

The `marketplace.meteringAgent` role enables tracking Marketplace [product](../concepts/product.md) usage.

This role allows a [partner](../quickstart.md) to:
- Authenticate apps in the Metering API.
- Track the installed [app metrics](../concepts/api-usage.md#guidelines) to [price](../concepts/tariff.md) the app usage.

You can assign this role to a [service account](../../iam/concepts/users/service-accounts.md) under which you are going to send the usage metrics.

#### license-manager.saasSubscriptionSupervisor {#license-manager-saasSubscriptionSupervisor}

The `license-manager.saasSubscriptionSupervisor` role enables viewing info on [subscriptions](../concepts/users/subscription.md) and their links to resources, apps, and services, as well as creating such links.

This role is designed for SaaS products and can be assigned to a [service account](../../iam/concepts/users/service-accounts.md) used to link subscriptions to resources, apps, and services.

#### marketplace.productInstances.saasSupervisor {#marketplace-productInstances-saasSupervisor}

The `marketplace.productInstances.saasSupervisor` role enables viewing info on installed Marketplace SaaS [products](../concepts/product.md) and activating such products.

#### marketplace.product.creator {#marketplace-product-creator}

The `marketplace.product.creator` role enables creating [Marketplace products](../concepts/product.md) in the [partner profile](../quickstart.md#registration) and managing access to such products.

#### marketplace.product.admin {#marketplace-product-admin}

The `marketplace.product.admin` role enables managing Marketplace products and access to them, as well as their versions, pricing, trial periods, forms, and moderation requests.

Users with this role can:
* View info on the access permissions granted for products, as well as modify such permissions.
* View info on [products](../concepts/product.md), as well as create and delete them.
* View the list of product [versions](../concepts/version.md) and info on them, as well as create, modify, and delete versions.
* View the list of product [pricing plans](../concepts/tariff.md) and info on such plans, as well as create and edit plans.
* View info on [trial periods](../concepts/trial-period.md) and create, modify, and delete them.
* View the list of moderation requests for products and info on them, as well as create, modify, and delete such requests.
* View the list of product forms and info on them, as well as create, modify, and delete such forms.
* View the list of product categories.

#### marketplace.publishers.reportViewer {#marketplace-publishers-reportViewer}

The `marketplace.publishers.reportViewer` role enables viewing the reports on [Marketplace products](../concepts/product.md) in the [partner profile](../quickstart.md#registration).

#### marketplace.publishers.viewer {#marketplace-publishers-viewer}

The `marketplace.publishers.viewer` role enables viewing info on the partner profile and Marketplace products within it, as well as contacting tech support.

Users with this role can:
* View the list of available [partner profiles](../quickstart.md#registration), info on them and on the access permissions granted for them.
* View the list of product [versions](../concepts/version.md) and info on them, as well as create, modify, and delete versions.
* View the list of moderation requests for products and info on such requests.
* Create technical support [requests](../../support/overview.md), as well as view, leave comments, and close them.

This role includes the `marketplace.publishers.member` permissions.

#### marketplace.publishers.editor {#marketplace-publishers-editor}

The `marketplace.publishers.editor` role enables managing Marketplace products and access to them, as well as their versions, pricing, trial periods, forms, and moderation requests. It also enables contacting tech support.

Users with this role can:
* View the list of available [partner profiles](../quickstart.md#registration), info on them and on the access permissions granted for them.
* View info on the access permissions granted for products, as well as modify such permissions.
* View info on [products](../concepts/product.md), as well as create and delete them.
* View the list of product [versions](../concepts/version.md) and info on them, as well as create, modify, and delete versions.
* View the list of product [pricing plans](../concepts/tariff.md) and info on such plans, as well as create and edit plans.
* View the list of product [trial periods](../concepts/trial-period.md) and info on them, as well as create, modify, and delete such periods.
* View the list of moderation requests for products and info on them, as well as create, modify, and delete such requests.
* View the list of product forms and info on them, as well as create, modify, and delete such forms.
* View the list of product categories.
* Create technical support [requests](../../support/overview.md), as well as view, leave comments, and close them.

This role includes the `marketplace.publishers.viewer` and `marketplace.product.admin` permissions.

#### marketplace.publishers.admin {#marketplace-publishers-admin}

The `marketplace.publishers.admin` role enables managing access to the partner profile, as well as managing Marketplace products and access to them, their versions, pricing, trial periods, forms, and moderation requests. It also enables viewing reports on Marketplace products in the partner profile.

Users with this role can:
* View the list of available [partner profiles](../quickstart.md#registration), info on them and on the access permissions granted for them, as well as modify such permissions.
* View info on the access permissions granted for products, as well as modify such permissions.
* View info on [products](../concepts/product.md), as well as create and delete them.
* View the list of product [versions](../concepts/version.md) and info on them, as well as create, modify, and delete versions.
* View the list of product [pricing plans](../concepts/tariff.md) and info on such plans, as well as create and edit plans.
* View info on [trial periods](../concepts/trial-period.md) and create, modify, and delete them.
* View the list of moderation requests for products and info on them, as well as create, modify, and delete such requests.
* View the list of product forms and info on them, as well as create, modify, and delete such forms.
* View the list of product categories.
* View the reports on Marketplace products in the partner profile.
* Create technical support [requests](../../support/overview.md), as well as view, leave comments, and close them.

This role includes the `marketplace.publishers.editor` and `marketplace.publishers.reportViewer` permissions.

#### marketplace.publishers.owner {#marketplace-publishers-owner}

The `marketplace.publishers.owner` role enables managing access to the partner profile, as well as managing Marketplace products and access to them, their versions, pricing, trial periods, forms, and moderation requests. It also enables viewing reports on Marketplace products in the partner profile.

This role is granted to the billing account owner when creating a partner profile and cannot be re-assigned.

Users with this role can:
* View the list of available [partner profiles](../quickstart.md#registration), info on them and on the access permissions granted for them, as well as modify such permissions.
* View info on the access permissions granted for products, as well as modify such permissions.
* View info on [products](../concepts/product.md), as well as create and delete them.
* View the list of product [versions](../concepts/version.md) and info on them, as well as create, modify, and delete versions.
* View the list of product [pricing plans](../concepts/tariff.md) and info on such plans, as well as create and edit plans.
* View the list of product [trial periods](../concepts/trial-period.md) and info on them, as well as create, modify, and delete such periods.
* View the list of moderation requests for products and info on them, as well as create, modify, and delete such requests.
* View the list of product forms and info on them, as well as create, modify, and delete such forms.
* View the list of product categories.
* View the reports on Marketplace products in the partner profile.
* Create technical support [requests](../../support/overview.md), as well as view, leave comments, and close them.

This role includes the `marketplace.publishers.admin` permissions.

#### marketplace.publishers.member {#marketplace-publishers-member}

The `marketplace.publishers.member` role provides the [partner profile](../quickstart.md#registration) member access; however, it does not grant any access to the profile resources. To grant access to [products](../concepts/product.md) or partner profile reports, you also need to assign the `marketplace.publishers.viewer`, `marketplace.publishers.editor`, `marketplace.publishers.admin`, or `marketplace.publishers.owner` role to the relevant user.

## Adding a user to the Marketplace partner profile {#add-user}

To add a new user to the Marketplace partner profile, you need the `marketplace.publishers.admin` role or higher.

You can only add a [user with a Yandex account](../../iam/concepts/users/accounts.md#passport) or a [federated user](../../iam/concepts/users/accounts.md#saml-federation). To add a new user:

{% list tabs group=authentication %}

- Yandex account {#yandex-account}

  1. Open the [Marketplace partner dashboard](https://partners.yandex.cloud/).
  1. In the left-hand panel, select ![persons](../../_assets/console-icons/persons.svg) **Access management**.
  1. At the top of the screen, click **Add user** and in the window that opens:

      1. Specify the email address of the Yandex account belonging to the user you want to add to your partner dashboard.
      1. Click **Add**.

- Federated account {#federated-account}

  1. Open the [Marketplace partner dashboard](https://partners.yandex.cloud/).
  1. In the left-hand panel, select ![persons](../../_assets/console-icons/persons.svg) **Access management**.
  1. At the top of the screen, click **Add federated user** and in the window that opens:

      1. Specify the name ID of the federated user you want to add to your partner dashboard.

          You should specify the name ID returned by the Identity Provider (IdP) on successful authentication. This may be a UPN or user email address.

          You can add multiple users at once by separating their name IDs with a line break.

      1. Click **Add**.

{% endlist %}

As a result, you will see the new user in the list of users on the **Access management** page. The users you add are assigned the [`marketplace.publishers.member`](#marketplace-publishers-member) and [`marketplace.publishers.viewer`](#marketplace-publishers-viewer) roles by default.

## Assigning and revoking a role {#assign-role}

In the Marketplace partner dashboard, you can assign roles for specific products or for a partner profile. To assign a role to a user or revoke it:

{% list tabs %}

- For a product

  1. Open the [Marketplace partner dashboard](https://partners.yandex.cloud/).
  1. In the left-hand panel, select ![shopping-cart](../../_assets/console-icons/shopping-cart.svg) **Products**.
  1. Click on the row with the product you want to assign or revoke a role for. In the window that opens:

      1. In the left-hand menu, select **Access management**.
      1. In the row with the appropriate user, click ![ellipsis](../../_assets/console-icons/ellipsis.svg) and select **Change**. In the window that opens:

          1. To add a new role, click ![plus](../../_assets/console-icons/plus.svg) **Add role** and select the required role.
          
              To revoke a role, click ![xmark](../../_assets/console-icons/xmark.svg) to the right of the role.
          1. Click **Save**.

- For a partner profile

  1. Open the [Marketplace partner dashboard](https://partners.yandex.cloud/).
  1. In the left-hand panel, select ![persons](../../_assets/console-icons/persons.svg) **Access management**.
  1. In the row with the appropriate user, click ![ellipsis](../../_assets/console-icons/ellipsis.svg) and select **Change**. In the window that opens:

      1. To add a new role, click ![plus](../../_assets/console-icons/plus.svg) **Add role** and select the required role.
      
          To revoke a role, click ![xmark](../../_assets/console-icons/xmark.svg) to the right of the role.
      1. Click **Save**.

{% endlist %}