Skip to content

Commit bcf6ebd

Browse files
patriciasantaanapatriciasantaana
authored
fix account scoped roles (#18216)
1 parent 0a10975 commit bcf6ebd

File tree

1 file changed

+6
-6
lines changed
  • src/content/docs/fundamentals/setup/manage-members

1 file changed

+6
-6
lines changed

‎src/content/docs/fundamentals/setup/manage-members/roles.mdx‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
2424
| API Gateway | Grants full access to [API Gateway (including API Shield)](/api-shield/) for all domains in an account. |
2525
| API Gateway Read | Grants read access to [API Gateway (including API Shield)](/api-shield/) for all domains in an account. |
2626
| Audit Logs Viewer | Can view [Audit Logs](/fundamentals/setup/account/account-security/review-audit-logs/). |
27-
| Bot Management (Account-wide) | Can edit [Bot Management](/bots/plans/bm-subscription/) (including [Super Bot Fight Mode](/bots/get-started/pro/)) configurations for all domains in account. |
27+
| Bot Management (Account-Wide) | Can edit [Bot Management](/bots/plans/bm-subscription/) (including [Super Bot Fight Mode](/bots/get-started/pro/)) configurations for all domains in account. |
2828
| Billing | Can edit the account’s [billing profile](/fundamentals/subscriptions-and-billing/create-billing-profile/) and subscriptions |
2929
| Cloudflare Access | Can edit [Cloudflare Access](/cloudflare-one/policies/access/) policies. |
3030
| Cache Purge | Can purge the edge cache. |
@@ -34,7 +34,6 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
3434
| Cloudflare R2 Admin | Can edit Cloudflare [R2](/r2/) buckets, objects, and associated configurations. |
3535
| Cloudflare R2 Read | Can read Cloudflare [R2](/r2/) buckets, objects, and associated configurations. |
3636
| Cloudflare Stream | Can edit [Cloudflare Stream](/stream/) media. |
37-
| Cloudflare Workers Admin | Can edit Cloudflare [Workers](/workers/), [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). Also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). |
3837
| Cloudflare Zero Trust | Can edit [Cloudflare for Zero Trust](/cloudflare-one/). |
3938
| Cloudflare Zero Trust PII | Can access [Cloudflare for Zero Trust](/cloudflare-one/) PII. |
4039
| Cloudflare Zero Trust Read Only | Can access [Cloudflare for Zero Trust](/cloudflare-one/) read only mode. |
@@ -43,7 +42,7 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
4342
| Email Configuration Admin | Grants write access to all of CES, [CASB](/cloudflare-one/applications/scan-apps/), [DLP](/cloudflare-one/policies/data-loss-prevention/), [Gateway](/cloudflare-one/policies/gateway/), and [Tunnels](/cloudflare-one/connections/connect-networks/), except Mail Preview, Raw Email, on-demand reports, actions on emails, and Submissions, Submission Transparency (Requires Cloudflare Zero Trust PII). |
4443
| Email Integration Admin | Grants write access to CES account integration only, [CASB](/cloudflare-one/applications/scan-apps/), [DLP](/cloudflare-one/policies/data-loss-prevention/), [Gateway](/cloudflare-one/policies/gateway/), and [Tunnels](/cloudflare-one/connections/connect-networks/). |
4544
| Email Security Analyst | Grants write access to all of CES, except Settings which is read only (Requires Cloudflare Zero Trust PII). |
46-
| Email Security Read Only | Grants read access to all of CES, but cannot see Raw Email, take action on emails, or make Submissions (Requires Cloudflare Zero Trust PII). |
45+
| Email Security Readonly | Grants read access to all of CES, but cannot see Raw Email, take action on emails, or make Submissions (Requires Cloudflare Zero Trust PII). |
4746
| Email Security Reporting | Grants read access to CES Home, PhishGuard, and Submission Transparency. |
4847
| Firewall | Can edit [WAF](/waf/), [IP Access rules](/waf/tools/ip-access-rules/), [Zone Lockdown](/waf/tools/zone-lockdown/) settings, and [Cache Rules](/cache/how-to/cache-rules/). |
4948
| Load Balancer | Can edit [Load Balancers](/load-balancing/), Pools, Origins, and Health Checks. |
@@ -57,19 +56,20 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
5756
| Minimal Account Access | Can view account, and nothing else. |
5857
| Page Shield | Grants write access to [Page Shield](/page-shield/) across the whole account. |
5958
| Page Shield Read | Grants read access to [Page Shield](/page-shield/) across the whole account. |
60-
| Hyperdrive Read | Grants read access to [Hyperdrive](/hyperdrive/) database configuration. |
59+
| Hyperdrive Readonly | Grants read access to [Hyperdrive](/hyperdrive/) database configuration. |
6160
| Hyperdrive Admin | Grants write access to [Hyperdrive](/hyperdrive/) database configuration. |
6261
| SSL/TLS, Caching, Performance, Page Rules, and Customization | Can edit most Cloudflare settings except for [DNS](/dns/) and [Firewall](/waf/). |
6362
| Trust and Safety | Can access trust and safety related services. |
6463
| Turnstile | Grants full access to [Turnstile](/turnstile/). |
6564
| Turnstile Read | Grants read access to [Turnstile](/turnstile/). |
6665
| Vectorize Admin | Can edit [Vectorize](/vectorize/) configurations. |
67-
| Vectorize Read only | Can read [Vectorize](/vectorize/) configurations. |
66+
| Vectorize Readonly | Can read [Vectorize](/vectorize/) configurations. |
6867
| Waiting Room Admin | Can edit [Waiting Room](/waiting-room/) configuration. |
6968
| Waiting Room Read | Can read [Waiting Room](/waiting-room/) configuration. |
69+
| Workers Admin | Can edit Cloudflare [Workers](/workers/), [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). Also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). |
7070
| Zaraz Admin | Can edit and publish [Zaraz](/zaraz/) configuration. |
7171
| Zaraz Edit | Can edit [Zaraz](/zaraz/) configuration. |
72-
| Zaraz Read | Can read [Zaraz](/zaraz/) configuration. |
72+
| Zaraz Readonly | Can read [Zaraz](/zaraz/) configuration. |
7373
| Zone Versioning (Account-Wide) | Can view and edit [Zone Versioning](/version-management/) for all domains in account. |
7474
| Zone Versioning Read (Account-Wide) | Can view [Zone Versioning](/version-management/) for all domains in account. |
7575

0 commit comments

Comments
 (0)