Cloudflare Docs
Cloud Email Security (formerly Area 1)
Edit this page
Report an issue with this page
Log into the Cloudflare dashboard
Set theme to dark (⇧+D)


When you create a user, the available options for permissions depend on whether your account is a parent account or a child account.

​​ Parent accounts

Parent accounts are treated as containers with no services provisioned. User accounts created at the parent level will allow them to access any child account.

These accounts are only required for administrators who manage multiple accounts, most commonly associated with our partners.

Parent users can have one of the following roles:

  • Viewer: Can enter child accounts but is prevented from making any settings changes, regardless of the customer account settings.
  • SOC Analyst: Can enter child accounts and make changes on behalf of the customer.

If your account has parent permissions that conflict with a parent user’s permissions, the parent permissions set on your account take precedence.

​​ Child accounts

Child accounts control settings and services associated with an Cloud Email Security instance.

​​ Child users

Users created at child level will only have access to the assigned child account. These users can have one of the following roles:

  • Super Admin: Has full access to the account and can make any configuration changes. Can access Settings (the gear icon).
  • Configuration Admin: Can make configuration changes and manage users, except for Super Admin. Has no ability to review messages.
  • SOC Analyst: Can search, review and retract messages. Has no admin capabilities or access to Settings (the gear icon).
  • Viewer: Only has access to metrics within the system. No access to Settings (the gear icon).
Account areaSuper AdminConfiguration AdminSOC AnalystViewer
All Settings
User Profile
Global Search
Detection Search
Detection Search Actions
Mail Trace
Announcements and Support
Message Preview
Message Retraction
Admin Quarantine

​​ Parent users

Depending on the parent permissions of your child account, you can delegate access to parent users of your account. This configuration will allow a parent user to view and change settings associated with your account.