diff --git a/src/content/docs/log-explorer/api.mdx b/src/content/docs/log-explorer/api.mdx index 806ffd51d143e2f..1f51e499ad64e03 100644 --- a/src/content/docs/log-explorer/api.mdx +++ b/src/content/docs/log-explorer/api.mdx @@ -9,15 +9,10 @@ Configuration and Log searches are also available via a public API. ## Authentication -Log Explorer is available to users with the following permissions: - -- **Logs Edit**: users with Logs Edit permissions can enable datasets. -- **Logs Read**: users with Logs Read permissions can run queries via the UI or API. - -Note that these permissions exist at the account and zone level and you need the appropriate permission level for the datasets you wish to query. - Authentication with the API can be done via an API token or API key with an email. Refer to [Create API token](/fundamentals/api/get-started/create-token/) for further instructions. +For detailed information on permissions required for each Log Explorer feature, refer to the [Permissions](/log-explorer/#permissions) section. + ## Query data Log Explorer includes a SQL API for submitting queries. diff --git a/src/content/docs/log-explorer/index.mdx b/src/content/docs/log-explorer/index.mdx index 6aa5c9648d89c8c..deeb5ba7cae1909 100644 --- a/src/content/docs/log-explorer/index.mdx +++ b/src/content/docs/log-explorer/index.mdx @@ -22,6 +22,21 @@ Log Explorer provides access to Cloudflare logs with all the context available w Contract customers can choose to store their logs in Log Explorer for up to two years, at an additional cost of $0.10 per GB per month. Customers interested in this feature can contact their account team to have it added to their contract. +## Permissions + +Access to Log Explorer features is controlled through specific permissions. Each permission grants users the ability to perform certain actions, such as querying logs, managing datasets, or creating dashboards. + +| Feature | Required Permission | Description | +|----------|--------------------|--------------| +| **Manage datasets** | `Logs Edit` | Add, enable, or disable datasets. | +| **Log Search** | `Logs Read` | Query logs in the dashboard or via API. | +| **Log Search (save query)** | `Logs Write` | Save log search queries. | +| **Custom dashboards** | `Analytics Read` | Create and view custom dashboards. | + +These permissions apply across both the dashboard and the API, and must be granted at either the account or zone level depending on which datasets you need to access. + +Authentication with the API can be done via an API token or API key with an email. Refer to [Create API token](/fundamentals/api/get-started/create-token/) for further instructions. + ## Features