Contact UsTry it for free
© 2026 Direct Cursus Technology L.L.C.

Viewing roles assigned to a function

Written by
Updated at March 17, 2026

Note

A function automatically inherits roles assigned for a folder, cloud, or organization. However, they do not appear in the list of assigned roles. You can learn more about viewing roles here.

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id options.

To view roles assigned to a function, run this command:

yc serverless function list-access-bindings <function_name>

Result:

+------------------------------+--------------+-----------------------+
|           ROLE ID            | SUBJECT TYPE |       SUBJECT ID      |
+------------------------------+--------------+-----------------------+
| functions.functionInvoker    | system       | allAuthenticatedUsers |
+------------------------------+--------------+-----------------------+

To view function roles, use the listAccessBindings REST API method for the Function resource or the FunctionService/ListAccessBindings gRPC API call.

Previous
Making a function private
Next
Assigning roles to a function