[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > [Step-by-step guides](index.md) > Access management > Viewing roles assigned in an organization

# Viewing roles assigned in an organization

You can view all [roles](../security/index.md) assigned to subjects in an organization:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization) using an administrator or organization owner account.

  1. In the left-hand panel, select ![persons-lock](../../_assets/console-icons/persons-lock.svg) **Access bindings**.

  1. The **Access bindings** page will display information about users and roles assigned to them.

     If you have more than one organization, you can [switch](manage-organizations.md#switch-to-another-org) to the one you need. To do this, click ![chevron-down](../../_assets/console-icons/chevron-down.svg) next to the name of the current organization in the top-left corner of the screen and select another one.

- CLI {#cli}

  If you do not have the Yandex Cloud CLI yet, [install and initialize it](../../cli/quickstart.md#install).

  The folder used by default is the one specified when [creating](../../cli/operations/profile/profile-create.md) the CLI profile. To change the default folder, use the `yc config set folder-id <folder_ID>` command. You can also specify a different folder for any command using `--folder-name` or `--folder-id`. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

  1. Get a list of available organizations:
     
     ```bash
     yc organization-manager organization list
     ```
     
     Result:
     
     ```text
     +----------------------+-----------------------------+-------------------------+--------+
     |          ID          |            NAME             |          TITLE          | LABELS |
     +----------------------+-----------------------------+-------------------------+--------+
     | bpf1smsil5q0******** | org1-technical-name         | Organization One        |        |
     | bpf2c65rqcl8******** | org2-technical-name         | Organization Two        |        |
     | bpfaidqca8vd******** | org3-technical-name         | Organization Three      |        |
     +----------------------+-----------------------------+-------------------------+--------+
     ```
     
     Copy the ID of the organization you need from the `ID` column.

  1. See the description of the CLI command to get a list of roles assigned in an organization:

     ```bash
     yc organization-manager organization list-access-bindings --help
     ```

  1. Get a list of roles assigned in an organization by specifying its name or ID:

     ```bash
     yc organization-manager organization list-access-bindings <organization_ID>
     ```

     Result:

     ```text
     +------------------------------------------+----------------+----------------------+
     |                 ROLE ID                  |  SUBJECT TYPE  |      SUBJECT ID      |
     +------------------------------------------+----------------+----------------------+
     | auditor                                  | serviceAccount | ajefbjkmgjt1******** |
     | admin                                    | userAccount    | asefbskmgjt1******** |
     | organization-manager.organizations.owner | userAccount    | ajcfabjkmgjt******** |
     +------------------------------------------+----------------+----------------------+
     ```

- API {#api}

  Use the [ListAccessBindings](../api-ref/Organization/listAccessBindings.md) REST API method for the [Organization](../api-ref/Organization/index.md) resource or the [OrganizationService/ListAccessBindings](../api-ref/grpc/Organization/listAccessBindings.md) gRPC API call.

{% endlist %}