Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Serverless Integrations
  • Comparing with other Yandex Cloud services
    • All guides
        • Viewing roles assigned for a workflow
        • Assigning roles for a workflow
        • Revoking roles assigned for a workflow
    • Viewing operations with service resources
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Public materials
  • Release notes
  1. Step-by-step guides
  2. Workflows
  3. Managing workflow access permissions
  4. Viewing roles assigned for a workflow

Viewing roles assigned for a workflow

Written by
Yandex Cloud
Updated at January 12, 2026

Note

Workflows automatically inherit roles assigned for the relevant folder, cloud, or organization. However, they are not displayed in the list of assigned roles. You can learn more about viewing roles here.

CLI
API

If you do not have the Yandex Cloud CLI installed yet, install and initialize it.

By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.

To view roles assigned for a workflow, run this command:

yc serverless workflow list-access-bindings <workflow_name_or_ID>

Result:

+---------------------------------+----------------+----------------------+
|             ROLE ID             |  SUBJECT TYPE  |      SUBJECT ID      |
+---------------------------------+----------------+----------------------+
| serverless.workflows.admin      | serviceAccount | ajef2lm8ahpc******** |
| serverless.workflows.viewer     | serviceAccount | rrbilgiqaptv******** |
| serverless.workflows.executor   | userAccount    | aje9o8d241nl******** |
+---------------------------------+----------------+----------------------+

Use the listAccessBindings REST API method for the Workflow resource or the WorkflowService/ListAccessBindings gRPC API call.

Was the article helpful?

Previous
Terminating a workflow execution
Next
Assigning roles for a workflow
© 2026 Direct Cursus Technology L.L.C.