Assigning roles for an EventRouter resource

Written by

Updated at April 14, 2025

CLI

API

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameters.

To assign a role for an EventRouter resource, run the following command:

To a user:

yc serverless <resource_type> add-access-binding <resource_name_or_ID> \
  --user-account-id <user_ID> \
  --role <role>

To a service account:

yc serverless <resource_type> add-access-binding <resource_name_or_ID> \
  --service-account-id <service_account_ID> \
  --role <role>

To all authenticated users (the All authenticated users public group):

yc serverless <resource_type> add-access-binding <resource_name_or_ID> \
  --all-authenticated-users \
  --role <role>

Example

Assigning a role to a service account for a bus:

yc serverless eventrouter bus add-access-binding epdplu8jn7sr******** \
  --service-account-id rrbilgiqaptv******** \
  --role serverless.eventrouter.auditor

Result:

...1s...done (3s)

Use the setAccessBinding REST API method for the appropriate resource or this gRPC API call: <service>/SetAccessBinding.

For example, when assigning roles for a bus, use the setAccessBinding REST API method for the Bus resource or the BusService/SetAccessBinding gRPC API call.

Assigning roles for an EventRouter resource

Was the article helpful?