Revoking roles assigned to a function

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder through the --folder-name or --folder-id parameter.

To revoke a role for a function, run this command:

• User:

  yc serverless function remove-access-binding \
    --id <function_ID> \
    --user-account-id <user_ID> \
    --role <role>
  

  Result:

  done (1s)
  

• Service account:

  yc serverless function remove-access-binding \
    --id <function_ID> \
    --service-account-id <service_account_ID> \
    --role <role>
  

  Result:

  done (1s)
  

• All authorized users (the All authenticated users public group):

  yc serverless function remove-access-binding \
    --id <function_ID> \
    --all-authenticated-users \
    --role <role>
  

  Result:

  done (1s)