Skip to content

Commit d930e16

Browse files
joshthowardjoshthoward
authored
Clarify that account owned tokens work with Durable Objects (#19171)
1 parent 17e7206 commit d930e16

File tree

1 file changed

+66
-68
lines changed

1 file changed

+66
-68
lines changed

‎src/content/partials/fundamentals/account-owned-tokens.mdx‎

Lines changed: 66 additions & 68 deletions
Original file line numberDiff line numberDiff line change
@@ -1,87 +1,85 @@
11
---
2-
32
[]
4-
53
---
64

7-
While user tokens act on behalf of a particular user and inherit a subset of that user's permissions, account owned tokens allow you to set up durable integrations that can act as service principals with their own specific set of permissions. This approach is ideal for scenarios like CI/CD, or building integrations with external services like SEIMs where it is important that the integration continues working, even long after the user who configured the integration may have left your organization altogether. User tokens are better for ad hoc tasks like scripting, where acting as the user is ideal and durability is less of a concern.
5+
While user tokens act on behalf of a particular user and inherit a subset of that user's permissions, account owned tokens allow you to set up durable integrations that can act as service principals with their own specific set of permissions. This approach is ideal for scenarios like CI/CD, or building integrations with external services like SEIMs where it is important that the integration continues working, even long after the user who configured the integration may have left your organization altogether. User tokens are better for ad hoc tasks like scripting, where acting as the user is ideal and durability is less of a concern.
86

97
## Create an account owned token
8+
109
:::note
1110
Creating an account owned token requires Super Administrator permission on the account
1211
:::
1312

1413
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com).
15-
2. Go to **Manage Account** > **Account API Tokens**.
16-
4. Select **Create Token** and fill in the token name, permissions, and the optional expiration date for the token.
17-
5. Select **Continue to summary** and review the details.
18-
6. Select **Create Token**.
14+
2. Go to **Manage Account** > **Account API Tokens**.
15+
3. Select **Create Token** and fill in the token name, permissions, and the optional expiration date for the token.
16+
4. Select **Continue to summary** and review the details.
17+
5. Select **Create Token**.
1918

2019
Alternatively, you can create a token using the [account owned token creation API](/api/resources/accounts/subresources/tokens/methods/create/).
2120

2221
Refer to the [blog post](https://blog.cloudflare.com/account-owned-tokens-automated-actions-zaraz/) for more information.
2322

2423
## Compatibility matrix
2524

26-
Account owned tokens are generally available for all accounts. Some services may not support account owned tokens yet. Refer to the compatibility matrix below for the latest status.
27-
28-
| Product | Compatibility |
29-
| --- | --- |
30-
| Access | ✅ |
31-
| Account Analytics | ❌ |
32-
| Account Management | ✅ |
33-
| AI Gateway | ✅ |
34-
| AMP | ✅ |
35-
| API Shield | ✅ |
36-
| Argo | ✅ |
37-
| Billing | ✅ |
38-
| Cache | ✅ |
39-
| Cloud Connector | ✅ |
40-
| Configuration Rules | ✅ |
41-
| Custom Lists | ❌ |
42-
| Custom Pages | ✅ |
43-
| Data Loss Prevention | ✅ |
44-
| Digital Experience Monitoring | ✅ |
45-
| Distributed Web | ❌ |
46-
| DNS | ✅ |
47-
| Durable Objects | ❌ |
48-
| Email Relay | ❌ |
49-
| Gateway Filtering | ❌ |
50-
| Healthchecks | ✅ |
51-
| Hyperdrive | ❌ |
52-
| Images | ✅ |
53-
| Intel Data Platform | ❌ |
54-
| Load Balancing | ✅ |
55-
| Log Explorer | ❌ |
56-
| Magic Network Monitoring | ✅ |
57-
| Magic Transit | ❌ |
58-
| Magic WAN | ❌ |
59-
| Managed Rules | ✅ |
60-
| Network Error Logging | ❌ |
61-
| Page Shield | ✅ |
62-
| Pages | ✅ |
63-
| Pub/Sub | ❌ |
64-
| R2 | ✅ |
65-
| Radar | ✅ |
66-
| Registrar | ❌ |
67-
| Rulesets | ✅ |
68-
| Spectrum | ❌ |
69-
| Speed | ✅ |
70-
| SSL/TLS | ✅ |
71-
| Stream | ✅ |
72-
| Super Bot Fight Mode | ❌ |
73-
| Trace | ✅ |
74-
| Tunnels | ✅ |
75-
| Turnstile | ❌ |
76-
| Vectorize | ❌ |
77-
| Waiting Room | ✅ |
78-
| Workers | ✅ |
79-
| Workers AI | ❌ |
80-
| Workers KV | ✅ |
81-
| Workers Observability | ❌ |
82-
| Workers Queues | ✅ |
83-
| Zaraz | ✅ |
84-
| Zero Trust Client Platform | ❌ |
85-
| Zero Trust Devices and Services | ✅ |
86-
| Zone/Domain Management | ✅ |
25+
Account owned tokens are generally available for all accounts. Some services may not support account owned tokens yet. Refer to the compatibility matrix below for the latest status.
8726

27+
| Product | Compatibility |
28+
| ------------------------------- | ------------- |
29+
| Access | ✅ |
30+
| Account Analytics | ❌ |
31+
| Account Management | ✅ |
32+
| AI Gateway | ✅ |
33+
| AMP | ✅ |
34+
| API Shield | ✅ |
35+
| Argo | ✅ |
36+
| Billing | ✅ |
37+
| Cache | ✅ |
38+
| Cloud Connector | ✅ |
39+
| Configuration Rules | ✅ |
40+
| Custom Lists | ❌ |
41+
| Custom Pages | ✅ |
42+
| Data Loss Prevention | ✅ |
43+
| Digital Experience Monitoring | ✅ |
44+
| Distributed Web | ❌ |
45+
| DNS | ✅ |
46+
| Durable Objects | ✅ |
47+
| Email Relay | ❌ |
48+
| Gateway Filtering | ❌ |
49+
| Healthchecks | ✅ |
50+
| Hyperdrive | ❌ |
51+
| Images | ✅ |
52+
| Intel Data Platform | ❌ |
53+
| Load Balancing | ✅ |
54+
| Log Explorer | ❌ |
55+
| Magic Network Monitoring | ✅ |
56+
| Magic Transit | ❌ |
57+
| Magic WAN | ❌ |
58+
| Managed Rules | ✅ |
59+
| Network Error Logging | ❌ |
60+
| Page Shield | ✅ |
61+
| Pages | ✅ |
62+
| Pub/Sub | ❌ |
63+
| R2 | ✅ |
64+
| Radar | ✅ |
65+
| Registrar | ❌ |
66+
| Rulesets | ✅ |
67+
| Spectrum | ❌ |
68+
| Speed | ✅ |
69+
| SSL/TLS | ✅ |
70+
| Stream | ✅ |
71+
| Super Bot Fight Mode | ❌ |
72+
| Trace | ✅ |
73+
| Tunnels | ✅ |
74+
| Turnstile | ❌ |
75+
| Vectorize | ❌ |
76+
| Waiting Room | ✅ |
77+
| Workers | ✅ |
78+
| Workers AI | ❌ |
79+
| Workers KV | ✅ |
80+
| Workers Observability | ❌ |
81+
| Workers Queues | ✅ |
82+
| Zaraz | ✅ |
83+
| Zero Trust Client Platform | ❌ |
84+
| Zero Trust Devices and Services | ✅ |
85+
| Zone/Domain Management | ✅ |

0 commit comments

Comments
 (0)