# Compute Cloud API, REST: SnapshotSchedule.UpdateAccessBindings Updates access bindings for the snapshot schedule. ## HTTP request ``` POST https://compute.api.yandexcloud.kz/compute/v1/snapshotSchedules/{resourceId}:updateAccessBindings ``` ## Path parameters #| ||Field | Description || || resourceId | **string** Required field. ID of the resource for which access bindings are being updated. The maximum string length in characters is 64. || |# ## Body parameters {#yandex.cloud.access.UpdateAccessBindingsRequest} ```json { "accessBindingDeltas": [ { "action": "string", "accessBinding": { "roleId": "string", "subject": { "id": "string", "type": "string" } } } ] } ``` #| ||Field | Description || || accessBindingDeltas[] | **[AccessBindingDelta](#yandex.cloud.access.AccessBindingDelta)** Updates to access bindings. The number of elements must be in the range 1-1000. || |# ## AccessBindingDelta {#yandex.cloud.access.AccessBindingDelta} #| ||Field | Description || || action | **enum** (AccessBindingAction) Required field. The action that is being performed on an access binding. - `ADD`: Addition of an access binding. - `REMOVE`: Removal of an access binding. || || accessBinding | **[AccessBinding](#yandex.cloud.access.AccessBinding)** Required field. Access binding. For more information, see [Access Bindings](../../../iam/concepts/access-control/index.md#access-bindings). || |# ## AccessBinding {#yandex.cloud.access.AccessBinding} #| ||Field | Description || || roleId | **string** Required field. ID of the [yandex.cloud.iam.v1.Role](../../../iam/api-ref/Role/get.md#yandex.cloud.iam.v1.Role) that is assigned to the `subject`. The maximum string length in characters is 64. || || subject | **[Subject](#yandex.cloud.access.Subject)** Required field. Identity for which access binding is being created. It can represent an account with a unique ID or several accounts with a system identifier. || |# ## Subject {#yandex.cloud.access.Subject} #| ||Field | Description || || id | **string** Required field. ID of the subject. It can contain one of the following values:oauth * `allAuthenticatedUsers`: A special public group that represents anyone who is authenticated. It can be used only if the `type` is `system`. * `allUsers`: A special public group that represents anyone. No authentication is required. For example, you don't need to specify the IAM token in an API query. It can be used only if the `type` is `system`. * `group:organization::users`: A special system group that represents all members of organization with given <id>. It can be used only if the `type` is `system`. * `group:federation::users`: A special system group that represents all users of federation with given <id>. It can be used only if the `type` is `system`. * ``: An identifier that represents a user account. It can be used only if the `type` is `userAccount`, `federatedUser` or `serviceAccount`. The maximum string length in characters is 100. || || type | **string** Required field. Type of the subject. It can contain one of the following values: * `userAccount`: An account on Yandex or Yandex Connect, added to Yandex Cloud. * `serviceAccount`: A service account. This type represents the [yandex.cloud.iam.v1.ServiceAccount](../../../iam/api-ref/ServiceAccount/get.md#yandex.cloud.iam.v1.ServiceAccount) resource. * `federatedUser`: A federated account. This type represents a user from an identity federation, like Active Directory. * `system`: System group. This type represents several accounts with a common system identifier. For more information, see [Subject to which the role is assigned](../../../iam/concepts/access-control/index.md#subject). The maximum string length in characters is 100. || |# ## Response {#yandex.cloud.operation.Operation} **HTTP Code: 200 - OK** ```json { "id": "string", "description": "string", "createdAt": "string", "createdBy": "string", "modifiedAt": "string", "done": "boolean", "metadata": "object", // Includes only one of the fields `error`, `response` "error": { "code": "integer", "message": "string", "details": [ "object" ] }, "response": "object" // end of the list of possible fields } ``` An Operation resource. For more information, see [Operation](../../../api-design-guide/concepts/operation.md). #| ||Field | Description || || id | **string** ID of the operation. || || description | **string** Description of the operation. 0-256 characters long. || || createdAt | **string** (date-time) Creation timestamp. String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || createdBy | **string** ID of the user or service account who initiated the operation. || || modifiedAt | **string** (date-time) The time when the Operation resource was last modified. String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || done | **boolean** If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available. || || metadata | **object** Service-specific metadata associated with the operation. It typically contains the ID of the target resource that the operation is performed on. Any method that returns a long-running operation should document the metadata type, if any. || || error | **[Status](#google.rpc.Status)** The error result of the operation in case of failure or cancellation. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set. || || response | **object** The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is [google.protobuf.Empty](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#google.protobuf.Empty). If the original method is the standard Create/Update, the response should be the target resource of the operation. Any method that returns a long-running operation should document the response type, if any. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set. || |# ## Status {#google.rpc.Status} The error result of the operation in case of failure or cancellation. #| ||Field | Description || || code | **integer** (int32) Error code. An enum value of [google.rpc.Code](https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto). || || message | **string** An error message. || || details[] | **object** A list of messages that carry the error details. || |#