Skip to content

[Log Explorer] Adds permissions section #25953

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 22, 2025
Merged

[Log Explorer] Adds permissions section #25953

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
810bd32
Adds permissions section
angelampcosta Oct 21, 2025
7e64a2f
Apply suggestions from code review
angelampcosta Oct 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 2 additions & 7 deletions src/content/docs/log-explorer/api.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,15 +9,10 @@ Configuration and Log searches are also available via a public API.

## Authentication

Log Explorer is available to users with the following permissions:

- **Logs Edit**: users with Logs Edit permissions can enable datasets.
- **Logs Read**: users with Logs Read permissions can run queries via the UI or API.

Note that these permissions exist at the account and zone level and you need the appropriate permission level for the datasets you wish to query.

Authentication with the API can be done via an API token or API key with an email. Refer to [Create API token](/fundamentals/api/get-started/create-token/) for further instructions.

For detailed information on permissions required for each Log Explorer feature, refer to the [Permissions](/log-explorer/#permissions) section.

## Query data

Log Explorer includes a SQL API for submitting queries.
Expand Down
15 changes: 15 additions & 0 deletions src/content/docs/log-explorer/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,21 @@ Log Explorer provides access to Cloudflare logs with all the context available w

Contract customers can choose to store their logs in Log Explorer for up to two years, at an additional cost of $0.10 per GB per month. Customers interested in this feature can contact their account team to have it added to their contract.

## Permissions

Access to Log Explorer features is controlled through specific permissions. Each permission grants users the ability to perform certain actions, such as querying logs, managing datasets, or creating dashboards.

| Feature | Required Permission | Description |
|----------|--------------------|--------------|
| **Manage datasets** | `Logs Edit` | Add, enable, or disable datasets. |
| **Log Search** | `Logs Read` | Query logs in the dashboard or via API. |
| **Log Search (save query)** | `Logs Write` | Save log search queries. |
| **Custom dashboards** | `Analytics Read` | Create and view custom dashboards. |

These permissions apply across both the dashboard and the API, and must be granted at either the account or zone level depending on which datasets you need to access.

Authentication with the API can be done via an API token or API key with an email. Refer to [Create API token](/fundamentals/api/get-started/create-token/) for further instructions.

## Features

<Feature header="Log Search" href="/log-explorer/log-search/">
Expand Down
Loading