Contact UsGet started

Viewing roles assigned to a function

Written by
Updated at May 5, 2025

Note

A function automatically inherits roles assigned for a folder, cloud, or organization. However, they do not appear in the list of assigned roles. You can learn more about viewing roles here.

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified when creating the CLI profile is used by default. To change the default folder, use the yc config set folder-id <folder_ID> command. You can specify a different folder using the --folder-name or --folder-id parameter.

To view roles assigned to a function, run this command:

yc serverless function list-access-bindings <function_name>

Result:

+------------------------------+--------------+-----------------------+
|           ROLE ID            | SUBJECT TYPE |       SUBJECT ID      |
+------------------------------+--------------+-----------------------+
| functions.functionInvoker    | system       | allAuthenticatedUsers |
+------------------------------+--------------+-----------------------+

To view function roles, use the listAccessBindings REST API method for the Function resource or the FunctionService/ListAccessBindings gRPC API call.

Previous
Making a function private
Next
Assigning roles to a function