Skip to content

Manage

Last updated View as MarkdownAgent setup

Granting access to others on your account is done with several sets of data principles:

  1. Accounts have Account Members.
  2. Account Members have policies.
  3. Policies are constructed out of actors, roles, and scopes.

When inviting a new member, you can assign one or more permission policies to them directly. Policies can also be added or revoked at a later time.

Learn how to add new account members, edit or revoke their access, and resend verification emails.

View account members

To manage account members, you must have a role of Super Administrator and have a verified email address.

To view members using the dashboard:

In the Cloudflare dashboard, go to the Members page.

Go to Members ↗

To view members using the API, send a GET request.

Add account members

To manage account members, you must have a role of Super Administrator and have a verified email address.

To add a member to your account:

  1. In the Cloudflare dashboard, go to the Members page.

    Go to Members ↗

  2. Select Invite members.

  3. Under Add email addresses, enter one or more email addresses. Separate multiple addresses with commas.

  4. Under Add permission policies, create the first permission policy for these members:

    a. Choose the policy's scope: either the entire account, or specific resources such as individual domains, Workers, or Access applications.

    b. Select one or more roles to include in the policy. Search by role name, or expand a role category (for example, App Security or Cloudflare One / Zero Trust) and select individual roles. To select every role in a category, select the category's checkbox.

    c. Select Create policy.

  5. (Optional) Repeat the previous step to add more permission policies with different scopes or roles.

  6. Select Invite members.

Each invitee receives an email invitation and appears on the Members page with a Pending status until they accept it.

To add a member using the API, send a POST request.

Edit member permissions

To manage account members, you must have a role of Super Administrator and have a verified email address.

To edit member permissions using the dashboard:

  1. In the Cloudflare dashboard, go to the Members page.

    Go to Members ↗

  2. On the member's row, select ... > View & Edit permission policies.

  3. On the Permission policies tab, make your changes:

    • To add a policy, select Create a policy, choose the scope and roles, then select Create policy.
    • To change an existing policy, select ... > Edit policy on its row, adjust the scope and roles, then save your changes.
    • To remove a policy, select ... > Delete policy on its row.

To edit member permissions using the API, get a list of roles available for an account.

Then, send a PUT request to edit their permissions.

Requestbash

curl --request PUT \
  --url https://api.cloudflare.com/client/v4/accounts/{account_id}/members/{member_id} \
  --header 'Authorization: Bearer <API_TOKEN>' \
  --header 'Content-Type: application/json' \
  --data '{
	  "roles": [
	        {
	            "id": "<ROLE_ID1>"
	        },
	        {
	            "id": "<ROLE_ID2>"
	        }
	  	]
		}'

Manage member settings

To manage account members, you must have a role of Super Administrator and have a verified email address.

Each member has settings that apply only to them, such as their API access.

To manage a member's settings:

  1. In the Cloudflare dashboard, go to the Members page.

    Go to Members ↗

  2. On the member's row, select ... > Manage member settings.

  3. Under API access for this member, choose one of the following:

    • Account default: Follow the account-wide API access setting.
    • Allow access: Always allow API access, even if the account-wide setting is off.
    • Block access: Always block API access, even if the account-wide setting is on.

Resend an invitation

If you invited a member to your account but they cannot find the invitation or the invitation expires, you can resend the invitation through the Cloudflare dashboard:

  1. In the Cloudflare dashboard, go to the Members page.1

    Go to Members ↗

  2. On the row of the member whose Status is Pending, select ... > Resend invite.

Footnotes

  1. To manage account members, you must have a role of Super Administrator and have a verified email address. ↩

Remove account members

To manage account members, you must have a role of Super Administrator and have a verified email address.

To revoke a member's access to your account, or to cancel a pending invitation:

  1. In the Cloudflare dashboard, go to the Members page.

    Go to Members ↗

  2. On the member's row, select ... > Remove member.

  3. In the confirmation dialog, select Remove member.

To revoke a member's access to your account using the API, send a DELETE request.

Super Administrator access

If you are a Super Administrator for an account that has existing domains and you decide to leave the account, you can invite a new Super Administrator who will have access to the same account privileges.

You can delete your user as a Super Administrator, but you cannot delete your account. Other Super Administrators will continue to have access to the appropriate privileges to manage the account, including billing information.

Was this helpful?