Skip to content

[ZT] Update ZT permission names and descriptions #21295

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 2, 2025
Merged

[ZT] Update ZT permission names and descriptions #21295

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e680cb6
update ZT permission names and descriptions
ranbel Apr 1, 2025
4bff325
link to Tunnel docs
ranbel Apr 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 26 additions & 26 deletions src/content/partials/fundamentals/account-permissions-table.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,23 +8,23 @@ import { Markdown } from "~/components";

| Name | Description |
| -------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Access: Apps and Policies Read | Grants read access to [Cloudflare Access](/cloudflare-one/policies/access/) account resources. |
| Access: Apps and Policies Revoke | Grants ability to revoke all tokens to [Cloudflare Access](/cloudflare-one/policies/access/) account resources. |
| Access: Apps and Policies {props.editWord} | Grants write access to [Cloudflare Access](/cloudflare-one/policies/access/) account resources. |
| Access: Apps and Policies Read | Grants read access to [Cloudflare Access](/cloudflare-one/policies/access/) applications and policies |resources. |
| Access: Apps and Policies Revoke | Grants ability to revoke [Cloudflare Access application tokens](/cloudflare-one/identity/users/session-management/) |
| Access: Apps and Policies {props.editWord} | Grants write access to [Cloudflare Access](/cloudflare-one/policies/access/) applications and policies |
| Access: Audit Logs Read | Grants read access to [Cloudflare Access audit logs](/cloudflare-one/insights/logs/audit-logs/). |
| Access: Custom { props.src === "dash" ? "Pages" : "Page" } Read | Grants read access to [Cloudflare Access Custom Pages](/cloudflare-one/policies/gateway/block-page/). |
| Access: Custom { props.src === "dash" ? "Pages" : "Page" } {props.editWord} | Grants write access to [Cloudflare Access Custom Pages](/cloudflare-one/policies/gateway/block-page/). |
| Access: Device Posture Read | Grants read access to [Cloudflare Access Device Posture](/cloudflare-one/identity/devices/). |
| Access: Device Posture {props.editWord} | Grants write access to [Cloudflare Access Device Posture](/cloudflare-one/identity/devices/). |
| Access: { props.src === "dash" && "Mutual TLS" } Certificates Read | Grants read access to [Cloudflare Access mTLS certificates](/cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/). |
| Access: { props.src === "dash" && "Mutual TLS" } Certificates {props.editWord} | Grants write access to [Cloudflare Access mTLS certificates](/cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/). |
| Access: Custom Pages Read | Grants read access to [Cloudflare Access custom block pages](/cloudflare-one/applications/block-page/). |
| Access: Custom Pages {props.editWord} | Grants write access to [Cloudflare Access custom block pages](/cloudflare-one/applications/block-page/). |
| Access: Device Posture Read | Grants read access to [Cloudflare Access device posture](/cloudflare-one/identity/devices/). |
| Access: Device Posture {props.editWord} | Grants write access to [Cloudflare Access device posture](/cloudflare-one/identity/devices/). |
| Access: Mutual TLS Certificates Read | Grants read access to [Cloudflare Access mTLS certificates](/cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/). |
| Access: Mutual TLS Certificates {props.editWord} | Grants write access to [Cloudflare Access mTLS certificates](/cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/). |
| Access: Organizations, Identity Providers, and Groups Read | Grants read access to [Cloudflare Access account resources](/cloudflare-one/identity/). |
| Access: Organizations, Identity Providers, and Groups Revoke | Grants ability to revoke user sessions to [Cloudflare Access account resources](/cloudflare-one/identity/). |
| Access: Organizations, Identity Providers, and Groups {props.editWord} | Grants write access to [Cloudflare Access account resources](/cloudflare-one/identity/). |
| Access: Service Tokens Read | Grants read access to [Cloudflare Access Service Tokens](/cloudflare-one/identity/service-tokens/). |
| Access: Service Tokens {props.editWord} | Grants write access to [Cloudflare Access Service Tokens](/cloudflare-one/identity/service-tokens/). |
| Access: SSH Auditing { props.src === "api" && "CA" } Read | Grants read access to [SSH Auditing](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). |
| Access: SSH Auditing { props.src === "api" && "CA" } {props.editWord} | Grants write access to [SSH Auditing](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). |
| Access: Service Tokens Read | Grants read access to [Cloudflare Access service tokens](/cloudflare-one/identity/service-tokens/). |
| Access: Service Tokens {props.editWord} | Grants write access to [Cloudflare Access service tokens](/cloudflare-one/identity/service-tokens/). |
| Access: SSH Auditing Read | Grants read access to [Cloudflare Access SSH CAs](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/). |
| Access: SSH Auditing {props.editWord} | Grants write access to [Cloudflare Access SSH CAs](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/). |
| Account Analytics Read | Grants read access to [account analytics](/analytics/account-and-zone-analytics/account-analytics/). |
| Account Custom Pages Read | Grants read access to account-level [Custom Pages](/support/more-dashboard-apps/cloudflare-custom-pages/configuring-custom-pages-error-and-challenge/). |
| Account Custom Pages {props.editWord} | Grants write access to account-level [Custom Pages](/support/more-dashboard-apps/cloudflare-custom-pages/configuring-custom-pages-error-and-challenge/). |
Expand Down Expand Up @@ -59,18 +59,18 @@ import { Markdown } from "~/components";
| Cloudflare DEX {props.editWord} | Grants write access to [Digital Experience Monitoring](/cloudflare-one/insights/dex/). |
| { props.src === "dash" && "Cloudflare" } Images Read | Grants read access to [Cloudflare Images](/images/). |
| { props.src === "dash" && "Cloudflare" } Images {props.editWord} | Grants write access to [Cloudflare Images](/images/). |
| Cloudflare One { props.src === "dash" ? "Connector: cloudflared" : "cloudflared Connectors" } Read | Grants read access to `cloudflared` Connectors |
| Cloudflare One { props.src === "dash" ? "Connector: cloudflared" : "cloudflared Connectors" } {props.editWord} | Grants write access to `cloudflared` Connectors |
| Cloudflare One { props.src === "dash" ? "Connector: WARP" : "Warp Connectors" } Read | Grants read access to Warp Connectors |
| Cloudflare One { props.src === "dash" ? "Connector: WARP" : "Warp Connectors" } {props.editWord} | Grants write access to Warp Connectors |
| Cloudflare One Connectors Read | Grants read access to Cloudflare One Connectors |
| Cloudflare One Connectors {props.editWord} | Grants write access to Cloudflare One Connectors |
| Cloudflare One Networks Read | Grants read access to Cloudflare One Networks |
| Cloudflare One Networks {props.editWord} | Grants write access to Cloudflare One Networks |
| Cloudflare One Connector: cloudflared Read | Grants read access to [`cloudflared` connectors](/cloudflare-one/connections/connect-networks/) |
| Cloudflare One Connector: cloudflared {props.editWord} | Grants write access to [`cloudflared` connectors](/cloudflare-one/connections/connect-networks/) |
| Cloudflare One Connector: WARP Read | Grants read access to [WARP Connectors](/cloudflare-one/connections/connect-networks/private-net/warp-connector/) |
| Cloudflare One Connector: WARP {props.editWord} | Grants write access to [WARP Connectors](/cloudflare-one/connections/connect-networks/private-net/warp-connector/) |
| Cloudflare One Connectors Read | Grants read access to Cloudflare One connectors |
| Cloudflare One Connectors {props.editWord} | Grants write access to Cloudflare One connectors |
| Cloudflare One Networks Read | Grants read access to Cloudflare One routes and virtual networks |
| Cloudflare One Networks {props.editWord} | Grants write access to Cloudflare One routes and virtual networks |
| { props.src === "dash" && "Cloudflare" } Pages Read | Grants access to view [Cloudflare Pages](/pages/) projects. |
| { props.src === "dash" && "Cloudflare" } Pages {props.editWord} | Grants access to create, edit and delete [Cloudflare Pages](/pages/) projects. |
| { props.src === "dash" ? "Cloudflare" : "Argo" } Tunnel Read | Grants access to view [Cloudflare Tunnels](/cloudflare-one/connections/connect-networks/). |
| { props.src === "dash" ? "Cloudflare" : "Argo" } Tunnel {props.editWord} | Grants access to create and delete [Cloudflare Tunnels](/cloudflare-one/connections/connect-networks/). |
| Cloudflare Tunnel Read | Grants access to view [Cloudflare Tunnels](/cloudflare-one/connections/connect-networks/). |
| Cloudflare Tunnel {props.editWord} | Grants access to create and delete [Cloudflare Tunnels](/cloudflare-one/connections/connect-networks/). |
| Cloudforce One Read | Grants read access to Cloudforce One. |
| Cloudforce One {props.editWord} | Grants write access to Cloudforce One. |
| { props.src === "dash" ? "Email Security" : "Cloud Email Security:" } Read | Grants read access to [Cloud Email Security](/email-security/). |
Expand Down Expand Up @@ -145,8 +145,8 @@ import { Markdown } from "~/components";
| Workers Scripts Read | Grants read access to [Cloudflare Workers scripts](/workers/). |
| Workers Scripts {props.editWord} | Grants write access to [Cloudflare Workers scripts](/workers/). |
| Workers Tail Read | Grants [`wrangler tail`](/workers/wrangler/commands/#tail) read permissions. |
| Zero Trust Read | Grants read access to [Cloudflare Zero Trust](/cloudflare-one/). |
| Zero Trust Read | Grants read access to [Cloudflare Zero Trust](/cloudflare-one/) resources. |
| Zero Trust Report | Grants reporting access to [Cloudflare Zero Trust](/cloudflare-one/). |
| Zero Trust {props.editWord} | Grants write access to [Cloudflare Zero Trust](/cloudflare-one/). |
| Zero Trust {props.editWord} | Grants write access to [Cloudflare Zero Trust](/cloudflare-one/) resources. |
| Zero Trust: PII Read | Grants read access to [Cloudflare Zero Trust](/cloudflare-one/) PII. |
| Zero Trust: Seats {props.editWord} | Grants write access to the number of [Zero Trust Seats](/cloudflare-one/identity/users/seat-management/) your organization can use (and be billed for). |
| Zero Trust: Seats {props.editWord} | Grants write access to the number of [Zero Trust seats](/cloudflare-one/identity/users/seat-management/) your organization can use (and be billed for). |