Cloudflare Docs
Edit this page on GitHub
Set theme to dark (⇧+D)

Tenant structure

Cloudflare helps Channel and Alliance partners manage their and their customers’ accounts through a Tenant structure.

Partner accounts contain a tenant, which is a container for customer accounts and zones. For more details, keep reading.

​​ Tenants and Tenant admins

A Tenant is a special type of Cloudflare account that contains other accounts and resources.

Once you sign a partner agreement with Cloudflare, we create a special Tenant account and then add your user to that account as a Tenant admin. Cloudflare can add multiple users as Tenant admins upon request.

Tenant admins then become the default Super administrator(s) for all accounts and zones contained within the Tenant.

This means that each Tenant admin’s user API key can be used to provision accounts based on the catalog specified in your partner agreement.

If needed, you can also create additional Super administrators.

​​ Accounts, users, and resources

This Tenant structure gives your account streamlined administrative access to customer:

  • Accounts1
  • Users2
  • Resources3

At the same time, this structure keeps your customers’ data and settings separate from each other.

  1. An entity that contains various settings, users, and resources (zones, Zero Trust applications, Workers). ↩︎

  2. A member of a Cloudflare account with their own user profile and an associated role that specifies their privileges within that account. ↩︎

  3. A resource is an entity owned by an account, which could be a zone/domain, a Workers instance, or a Zero Trust application. ↩︎