Viewing roles assigned to a function
Written by
Updated at June 9, 2025
Note
CLI
API
If you do not have the Yandex Cloud CLI installed yet, install and initialize it.
By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID>
command. You can also set a different folder for any specific command using the --folder-name
or --folder-id
parameter.
To view roles assigned to a function, run this command:
yc serverless function list-access-bindings <function_name>
Result:
+------------------------------+--------------+-----------------------+
| ROLE ID | SUBJECT TYPE | SUBJECT ID |
+------------------------------+--------------+-----------------------+
| functions.functionInvoker | system | allAuthenticatedUsers |
+------------------------------+--------------+-----------------------+
To view function roles, use the listAccessBindings REST API method for the Function resource or the FunctionService/ListAccessBindings gRPC API call.