Contact UsGet started

Viewing roles assigned to a function

Written by
Updated at February 12, 2025

Note

A function automatically inherits roles assigned for a folder, cloud, or organization. However, they do not appear in the list of assigned roles. You can learn more about viewing roles here.

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder through the --folder-name or --folder-id parameter.

To view roles assigned to a function, run this command:

yc serverless function list-access-bindings <function_name>

Result:

+------------------------------+--------------+-----------------------+
|           ROLE ID            | SUBJECT TYPE |       SUBJECT ID      |
+------------------------------+--------------+-----------------------+
| functions.functionInvoker    | system       | allAuthenticatedUsers |
+------------------------------+--------------+-----------------------+

To view function roles, use the listAccessBindings REST API method for the Function resource or the FunctionService/ListAccessBindings gRPC API call.

Previous
Making a function private
Next
Assigning roles to a function