Viewing roles assigned for an EventRouter resource

Written by

Updated at May 5, 2025

Note

An EventRouter resource automatically inherits roles assigned for a folder, cloud, or organization. However, they are not displayed in the list of assigned roles. You can learn more about viewing roles here.

CLI

API

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified when creating the CLI profile is used by default. To change the default folder, use the yc config set folder-id <folder_ID> command. You can specify a different folder using the --folder-name or --folder-id parameter.

To view roles assigned for an EventRouter resource, run this command:

yc serverless <resource_type> list-access-bindings <resource_name_or_ID>

Example

Viewing roles assigned for a bus:

yc serverless eventrouter bus list-access-bindings epdplu8jn7sr********

Result:

+---------------------------------+----------------+----------------------+
|             ROLE ID             |  SUBJECT TYPE  |      SUBJECT ID      |
+---------------------------------+----------------+----------------------+
| serverless.eventrouter.admin    | serviceAccount | ajef2lm8ahpc******** |
| serverless.eventrouter.auditor  | serviceAccount | rrbilgiqaptv******** |
+---------------------------------+----------------+----------------------+

Use the listAccessBindings REST API method for the relevant resource or the <service>/ListAccessBindings gRPC API call.

For example, for a bus, use the listAccessBindings REST API method for the Bus resource or the BusService/ListAccessBindings gRPC API call.

Viewing roles assigned for an EventRouter resource

Was the article helpful?