Revoking roles assigned for a workflow

If you do not have the Yandex Cloud CLI installed yet, install and initialize it.

By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.

Run this command to revoke a role for a workflow:

• From a user:

  yc serverless workflow remove-access-binding <workflow_name_or_ID> \
    --user-account-id <user_ID> \
    --role <role>
  

• From a service account:

  yc serverless workflow remove-access-binding <workflow_name_or_ID> \
    --service-account-id <service_account_ID> \
    --role <role>
  

• From all authenticated users (the All authenticated users public group):

  yc serverless workflow remove-access-binding <workflow_name_or_ID> \
    --all-authenticated-users \
    --role <role>
  

Example

Revoking a role for a workflow from a service account:

yc serverless workflow remove-access-binding epdplu8jn7sr******** \
  --service-account-id rrbilgiqaptv******** \
  --role serverless.workflows.auditor

Result:

...1s...done (3s)