Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Command line interface
  • Getting started with the CLI
    • Overview
    • help
      • Overview
      • create-id-token
      • create-token
      • revoke-token
        • Overview
        • add-access-binding
        • add-labels
        • create
        • delete
        • get
        • list
        • list-access-bindings
        • list-operations
        • remove-access-binding
        • remove-labels
        • set-access-bindings
        • update
      • whoami
    • init
    • version
  • CLI releases
  • Troubleshooting
  1. CLI reference
  2. iam
  3. service-account
  4. Overview

yc iam service-account

Written by
Yandex Cloud
Updated at March 26, 2026

Manage service accounts

Command UsageCommand Usage

Syntax:

yc iam service-account <command>

Aliases:

  • service-accounts

Command TreeCommand Tree

  • yc iam service-account add-access-binding — Add access binding to ACCESS the specified service account as a resource. To configure service account access to a resource use add-access-binding command for the corresponding resource

  • yc iam service-account add-labels — Add labels to specified service account

  • yc iam service-account create — Create a service account

  • yc iam service-account delete — Delete the specified service account

  • yc iam service-account get — Show information about the specified service account

  • yc iam service-account list — List service accounts

  • yc iam service-account list-access-bindings — List access bindings for ACCESSING the specified service account. To determine if a service account has an access to a resource, use list-access-bindings command for the corresponding resource

  • yc iam service-account list-operations — List operations for the specified service account

  • yc iam service-account remove-access-binding — Remove access binding for ACCESSING the specified service account as a resource. To configure service account access to a resource use remove-access-binding command for the corresponding resource

  • yc iam service-account remove-labels — Remove labels from specified service account

  • yc iam service-account set-access-bindings — Set access bindings for ACCESSING the specified service account and DELETE all existing access bindings for all accounts if there were any. To configure service account access to a resource use set-access-bindings command for the corresponding resource

  • yc iam service-account update — Update the specified service account

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--syntax

string

CLI syntax: 1 (legacy) or 2 (current). Omit to use default-syntax in the profile or the product default.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

Was the article helpful?

Previous
list
Next
add-access-binding
© 2026 Direct Cursus Technology L.L.C.