Skip to content

Commit 1f82edf

Browse files
Update access-control and link from bring-your-own-keys
1 parent 574f109 commit 1f82edf

File tree

2 files changed

+22
-6
lines changed

2 files changed

+22
-6
lines changed

src/content/docs/ai-gateway/configuration/bring-your-own-keys.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ The keys are stored securely with [Secrets Store](/secrets-store/) and allows fo
2323
### Prerequisites
2424

2525
- Ensure your gateway is [authenticated](/ai-gateway/configuration/authentication/).
26-
- Ensure you have appropriate permissions to create and deploy secrets on Secrets Store.
26+
- Ensure you have appropriate [permissions](/secrets-store/access-control/) to create and deploy secrets on Secrets Store.
2727

2828
### Configure API keys
2929

src/content/docs/secrets-store/access-control.mdx

Lines changed: 21 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,14 +13,30 @@ Secrets Store allows security administrators to have more control by implementin
1313
While all Cloudflare accounts will have access to the Secrets Store section on the dashboard, only users with the necessary permissions will be able to interact with it, as described below.
1414
:::
1515

16-
## Relevant roles for Secrets Store
16+
## Relevant roles
1717

1818
Refer to the list below for default role definitions.
1919

20-
- **Super Administrator**: Can create, edit, duplicate, delete, and view secrets metadata. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/).
21-
- **Secrets Store Admin**: Can create, edit, duplicate, delete, and view secrets metadata.
22-
- **Secrets Store Deployer**: Can view secrets metadata but cannot create, edit, duplicate, nor delete secrets. Can also [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/).
23-
- **Secrets Store Reporter**: Can view secrets metadata. Cannot perform any actions (create, edit, duplicate, delete secrets), nor add a Secrets Store binding to a Worker.
20+
#### Super Administrator
21+
22+
- Can create, edit, duplicate, delete, and view secrets metadata.
23+
- Can [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/).
24+
- Can [create an association between a secret and an AI gateway](/ai-gateway/configuration/bring-your-own-keys/).
25+
26+
#### Secrets Store Admin
27+
28+
- Can create, edit, duplicate, delete, and view secrets metadata.
29+
30+
#### Secrets Store Deployer
31+
32+
- Can view secrets metadata but cannot create, edit, duplicate, nor delete secrets.
33+
- Can [add a Secrets Store binding to a Worker](/secrets-store/integrations/workers/).
34+
- Can [create an association between a secret and an AI gateway](/ai-gateway/configuration/bring-your-own-keys/).
35+
36+
#### Secrets Store Reporter
37+
38+
- Can view secrets metadata.
39+
- Cannot perform any actions (create, edit, duplicate, delete secrets), nor use Secrets Store integrations with other Cloudflare products.
2440

2541
## API token permissions
2642

0 commit comments

Comments
 (0)