Viewing roles assigned for a trail

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameters.

1. See the description of the CLI command to view roles assigned for a trail:

   yc audit-trails trail list-access-bindings --help
   

2. Get a list of trails:

   yc audit-trails trail list
   

   Result:

   +----------------------+--------------+--------+-------------------+
   |          ID          |     NAME     | STATUS |      FILTERS      |
   +----------------------+--------------+--------+-------------------+
   | cnp82sb0phnm******** | trailfromapi | ACTIVE | storage compute   |
   |                      |              |        | management.events |
   | cnp8v52idttr******** | tf-trail     | ACTIVE | storage compute   |
   |                      |              |        | mdb.postgresql    |
   | cnpnkcubr529******** | test-2       | ACTIVE | compute           |
   +----------------------+--------------+--------+-------------------+
   

3. View the roles assigned for a trail by specifying its name or ID:

   yc audit-trails trail list-access-bindings <trail_name_or_ID>
   

   Result:

   +---------------------+--------------+-----------------------+
   |       ROLE ID       | SUBJECT TYPE |      SUBJECT ID       |
   +---------------------+--------------+-----------------------+
   | audit-trails.viewer | system       | allAuthenticatedUsers |
   +---------------------+--------------+-----------------------+