Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity Hub
  • Access management
  • Pricing policy
    • Overview
      • Overview
        • Overview
        • create
        • delete
        • get
        • list
        • list-access-bindings
        • list-operations
        • set-access-bindings
        • update
        • update-access-bindings
  • Terraform reference
  • Audit Trails events
  • Release notes
  • Yandex Identity Hub Sync Agent release notes
  1. CLI reference
  2. idp
  3. userpool
  4. set-access-bindings

yc organization-manager idp userpool set-access-bindings

Written by
Yandex Cloud
Updated at January 27, 2026

Set access bindings for the specified user pool

Command UsageCommand Usage

Syntax:

yc organization-manager idp userpool set-access-bindings <USERPOOL-ID> [Flags...] [Global Flags...]

FlagsFlags

Flag

Description

--async

Display information about the operation in progress, without waiting for the operation to complete.

--access-binding

PROPERTY=VALUE[,PROPERTY=VALUE...]

Access binding to set. Can be used multiple times.

Possible property names:

  • role: Binding role ID.

  • service-account-id: Service account, whose access will be updated.

  • service-account-name: Service account, whose access will be updated.

  • user-account-id: User account, whose access will be updated.

  • user-yandex-login: User account, whose access will be updated.

  • all-authenticated-users: Access will be updated for all authenticated users

  • group-members: Update access for members of the group with specified ID

  • organization-users: Update access for users of organization with specified ID

  • federation-users: Update access for users of federation with specified ID

  • subject: Subject whose access will be updated; in TYPE:ID format, e.g. userAccount:<ID>, serviceAccount:<ID>, system:<ID>.

-y, --yes

Automatic yes to prompts.

--id

string

Userpool ID.

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

  • Setting up access for pool users

Was the article helpful?

Previous
list-operations
Next
update
© 2026 Direct Cursus Technology L.L.C.