Revoking roles assigned for a container

Written by

Updated at July 1, 2026

CLI

API

Run this command to revoke a role for a container:

From a user:

yc serverless container remove-access-binding \
  --name <container_name> \
  --user-account-id <user_ID> \
  --role <role>

Result:

done (1s)

yc serverless container remove-access-binding \
  --name <container_name> \
  --service-account-id <service_account_ID> \
  --role <role>

Result:

done (1s)

From all authenticated users (the All authenticated users public group):

yc serverless container remove-access-binding \
  --name <container_name> \
  --all-authenticated-users \
  --role <role>

Result:

done (1s)

To revoke roles for a container, use the updateAccessBindings REST API method for the Container resource or the ContainerService/UpdateAccessBindings gRPC API call.