Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Managed Service for ClickHouse®
  • Getting started
  • Access management
  • Pricing policy
    • Overview
      • Overview
      • add-access-binding
      • add-extension
      • add-external-dictionary
      • add-graphite-rollup
      • add-labels
      • add-zookeeper
      • backup
      • clear-compression
      • clear-query-masking-rules
      • create
      • delete
      • get
      • get-extension
      • list
      • list-access-bindings
      • list-backups
      • list-extensions
      • list-external-dictionaries
      • list-logs
      • list-operations
      • move
      • remove-access-binding
      • remove-extension
      • remove-external-dictionary
      • remove-graphite-rollup
      • remove-labels
      • reschedule-maintenance
      • restore
      • set-access-bindings
      • set-compression
      • set-query-masking-rules
      • start
      • stop
      • update
      • update-config
      • update-extension
      • update-external-dictionary
  • Terraform reference
  • Yandex Monitoring metrics
  • Audit Trails events
  • Public materials
  • Release notes
  1. CLI reference
  2. cluster
  3. set-access-bindings

yc managed-clickhouse cluster set-access-bindings

Written by
Yandex Cloud
Updated at January 27, 2026

Set access bindings for the specified ClickHouse cluster and delete all existing access bindings if there were any

Command UsageCommand Usage

Syntax:

yc managed-clickhouse cluster set-access-bindings <CLUSTER-NAME>|<CLUSTER-ID> [Flags...] [Global Flags...]

FlagsFlags

Flag

Description

--id

string

ID of the ClickHouse cluster.

--name

string

Name of the ClickHouse cluster.

--async

Display information about the operation in progress, without waiting for the operation to complete.

--access-binding

PROPERTY=VALUE[,PROPERTY=VALUE...]

Access binding to set. Can be used multiple times.

Possible property names:

  • role: Binding role ID.

  • service-account-id: Service account, whose access will be updated.

  • service-account-name: Service account, whose access will be updated.

  • user-account-id: User account, whose access will be updated.

  • user-yandex-login: User account, whose access will be updated.

  • all-authenticated-users: Access will be updated for all authenticated users

  • group-members: Update access for members of the group with specified ID

  • organization-users: Update access for users of organization with specified ID

  • federation-users: Update access for users of federation with specified ID

  • subject: Subject whose access will be updated; in TYPE:ID format, e.g. userAccount:<ID>, serviceAccount:<ID>, system:<ID>.

-y, --yes

Automatic yes to prompts.

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

Was the article helpful?

Previous
restore
Next
set-compression
© 2026 Direct Cursus Technology L.L.C.