|
1 | 1 | --- |
2 | 2 | title: Cloudflare User Groups & Enhanced Permission Policies are now in Beta |
3 | | -description: Simplifying the management of users & groups at scale within Cloudflare. |
| 3 | +description: Simplifying the management of users, groups, and permissions within Cloudflare. |
4 | 4 | products: |
5 | 5 | - fundamentals |
6 | 6 | date: 2025-06-02 |
7 | 7 | --- |
8 | 8 |
|
9 | | -We're excited to announce the Public Beta launch of **User Groups for Cloudflare Dashboard** and **SCIM User Groups**, expanding our RBAC capabilities to simplify user and group management at scale. We've also visually overhauled the **Permission Policies UI** to make defining permissions more intuitive. |
| 9 | +We're excited to announce the Public Beta launch of **User Groups for Cloudflare Dashboard** and **System for Cross Domain Identity Management (SCIM) User Groups**, expanding our RBAC capabilities to simplify user and group management at scale. |
| 10 | + |
| 11 | +We've also visually overhauled the **Permission Policies UI** to make defining permissions more intuitive. |
10 | 12 |
|
11 | 13 | --- |
12 | 14 |
|
13 | 15 | ### What's New: |
14 | 16 |
|
15 | | -**User Groups [BETA]**: As your team grows, so does the challenge of managing access. User Groups are a new Cloudflare IAM primitive that enable administrators to create collections of account members that are treated equally from an access control perspective. User Groups can be assigned permission policies, with individual members in the group inheriting all permissions granted to the User Group. User Groups can be created manually, via our APIs, or Terraform. |
| 17 | +**User Groups [BETA]**: User Groups are a new Cloudflare IAM primitive that enable administrators to create collections of account members that are treated equally from an access control perspective. User Groups can be assigned permission policies, with individual members in the group inheriting all permissions granted to the User Group. User Groups can be created manually, via our APIs, or Terraform. |
16 | 18 |
|
17 | 19 |
|
18 | | -**SCIM User Groups [BETA]**: Centralize & simplify your user and group management at scale by syncing memberships directly from your upstream identity provider (like Okta or Entra ID) to the Cloudflare Platform. This ensures Cloudflare stays in sync with your source of truth, letting you apply Permission Policies to those synced groups directly within the Cloudflare Dashboard. |
| 20 | +**SCIM User Groups [BETA]**: Centralize & simplify your user and group management at scale by syncing memberships directly from your upstream identity provider (like Okta or Entra ID) to the Cloudflare Platform. This ensures Cloudflare stays in sync with your identity provider, letting you apply Permission Policies to those synced groups directly within the Cloudflare Dashboard. |
19 | 21 |
|
20 | 22 |
|
21 | | -> **Note:** SCIM Virtual Groups(identified by the pattern CF-<accountID>-<Role Name> in your IdP) are deprecated as of 06/02/25. We recommend migrating SCIM Virtual Groups implementations to use SCIM User Groups. If you did not use Virtual Groups, no action is needed. |
| 23 | +> **Note:** SCIM Virtual Groups(identified by the pattern CF-<accountID>-<Role Name> in your IdP) are deprecated as of 06/02/25. We recommend migrating SCIM Virtual Groups implementations to use SCIM User Groups. If you did not use Virtual Groups, no action is needed. [Learn more here](https://developers.cloudflare.com/fundamentals/account/account-security/scim-setup/) |
22 | 24 |
|
23 | 25 |
|
24 | 26 | **Revamped Permission Policies UI [BETA]**: As Cloudflare's services have grown, so has the need for precise, role-based access control. We've given the Permission Policies builder a visual overhaul to make it much easier for administrators to find and define the exact permissions they want for specific principals. |
|
0 commit comments