Skip to content

Commit 03d4f71

Browse files
danielrsdanielrs
committed
feat: add "Developer Platform Read (Experimental)" role
The role should provide read-only access to most Developer Platform products: https://www.cloudflare.com/developer-platform/products/ These include: - Workers - Pages - Durabe Objects - KV - R2 - etc
1 parent 31a1024 commit 03d4f71

File tree

1 file changed

+6
-5
lines changed
  • src/content/docs/fundamentals/setup/manage-members

1 file changed

+6
-5
lines changed

‎src/content/docs/fundamentals/setup/manage-members/roles.mdx‎

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
2323
| API Gateway | Grants full access to [API Gateway (including API Shield)](/api-shield/) for all domains in an account. |
2424
| API Gateway Read | Grants read access to [API Gateway (including API Shield)](/api-shield/) for all domains in an account. |
2525
| Audit Logs Viewer | Can view [Audit Logs](/fundamentals/setup/account/account-security/review-audit-logs/). |
26-
| Bot Management (Account-wide) | Can edit [Bot Management](/bots/plans/bm-subscription/) (including [Super Bot Fight Mode](/bots/get-started/super-bot-fight-mode/)) configurations for all domains in account. |
26+
| Bot Management (Account-wide) | Can edit [Bot Management](/bots/plans/bm-subscription/) (including [Super Bot Fight Mode](/bots/get-started/super-bot-fight-mode/)) configurations for all domains in account. |
2727
| Billing | Can edit the account's [billing profile](/fundamentals/subscriptions-and-billing/create-billing-profile/) and subscriptions |
2828
| Cloudflare Access | Can edit [Cloudflare Access](/cloudflare-one/policies/access/) and [Cloudflare Tunnel](/cloudflare-one/connections/connect-networks/). |
2929
| Cache Purge | Can purge the edge cache and allows the reading of zone settings. |
@@ -39,6 +39,7 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
3939
| Cloudflare Zero Trust PII | Can access [Cloudflare Zero Trust](/cloudflare-one/) PII. |
4040
| Cloudflare Zero Trust Read Only | Can access [Cloudflare Zero Trust](/cloudflare-one/) read only mode. |
4141
| Cloudflare Zero Trust Reporting | Can access [Cloudflare Zero Trust](/cloudflare-one/) reporting data. |
42+
| Developer Platform Read (Experimental) | Grants read-only access to all products typically used as part of Cloudflare's Developer Platform, including [Workers](/workers/), [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/), [R2](/r2/), Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). Cloudflare may add additional read-only permissions to this role as new products are introduced. |
4243
| DNS | Can edit [DNS records](/dns/manage-dns-records/). |
4344
| Email Configuration Admin | Grants write access to all of Email Security, [CASB](/cloudflare-one/applications/casb/), [DLP](/cloudflare-one/policies/data-loss-prevention/), [Gateway](/cloudflare-one/policies/gateway/), and [Tunnels](/cloudflare-one/connections/connect-networks/), except Mail Preview, Raw Email, on-demand reports, actions on emails, and Submissions, Submission Transparency (Requires Cloudflare Zero Trust PII). |
4445
| Email Integration Admin | Grants write access to Email Security account integration only, [CASB](/cloudflare-one/applications/casb/), [DLP](/cloudflare-one/policies/data-loss-prevention/), [Gateway](/cloudflare-one/policies/gateway/), and [Tunnels](/cloudflare-one/connections/connect-networks/). |
@@ -60,9 +61,9 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
6061
| Hyperdrive Read | Grants read access to [Hyperdrive](/hyperdrive/) database configuration. |
6162
| Hyperdrive Admin | Grants write access to [Hyperdrive](/hyperdrive/) database configuration. |
6263
| SSL/TLS, Caching, Performance, Page Rules, and Customization | Can edit most Cloudflare settings except for [DNS](/dns/) and [Firewall](/waf/). |
63-
| Secrets Store Admin | Can create, edit, duplicate, delete, and view secrets metadata. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/). |
64-
| Secrets Store Deployer | Can view secrets metadata but cannot create, edit, duplicate, nor delete secrets. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/). |
65-
| Secrets Store Reporter | Can view secrets metadata. Cannot perform any actions (create, edit, duplicate, delete secrets), nor add a Secrets Store binding to a Worker. |
64+
| Secrets Store Admin | Can create, edit, duplicate, delete, and view secrets metadata. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/). |
65+
| Secrets Store Deployer | Can view secrets metadata but cannot create, edit, duplicate, nor delete secrets. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/). |
66+
| Secrets Store Reporter | Can view secrets metadata. Cannot perform any actions (create, edit, duplicate, delete secrets), nor add a Secrets Store binding to a Worker. |
6667
| Security Center Brand Protection | Can access the Brand Protection feature on the API and Cloudflare dashboard. Brand Protection role also gives you access to the Investigate platform. |
6768
| Security Center Cloudforce One Admin | Grants write access to [Cloudforce One](/security-center/cloudforce-one/). |
6869
| Security Center Cloudforce One Read | Grants read access to [Cloudforce One](/security-center/cloudforce-one/), and cannot create and/or edit RFIs or PIRs. |
@@ -97,4 +98,4 @@ Domain-scoped roles apply for a given domain within an account.
9798
| Domain Waiting Room Admin | Can edit [waiting rooms](/waiting-room/) configuration. |
9899
| Domain Waiting Room Read | Can read [waiting rooms](/waiting-room/) configuration. |
99100
| Zone Versioning | Grants full access to [Zone Versioning](/version-management/). |
100-
| Zone Versioning Read | Grants read-only access to [Zone Versioning](/version-management/). |
101+
| Zone Versioning Read | Grants read-only access to [Zone Versioning](/version-management/). |

0 commit comments

Comments
 (0)