Understand how to edit API keys, add additional users, and set access permissions to your Cloudflare account.
Overview
With a multi-user account, you can control multiple websites and invite users to manage Cloudflare settings on those websites. A user can access multiple accounts and have different permissions for each account that they can access.
There are two user roles: Super Administrator and Administrator. Super Administrators can edit all Cloudflare settings, make purchases, update billing, manage memberships and revoke access of other Super Administrators. As the account owner, you are automatically assigned the Super Administrator role.
Administrators can edit all Cloudflare settings except for membership management and billing. When setting up your Cloudflare account, you are automatically assigned the Super Administrator role. For Free, Pro, and Business accounts, each additional member will be automatically assigned the Administrator role.
Add or revoke members
Add a member
1. Log in to the Cloudflare dashboard.
2. Choose the account that you would like to update.
3. Click the Members tab.
4. Under Invite members, enter the email address of the member you want to invite to your account. Click Invite. That member will receive an email invitation from Cloudflare to join your account.
Optionally, you can click the Direct add option to add a member even if they have not accepted their invitation through email.
Revoke a member
1. From your dashboard, click Members.
2. From the Members list, locate the member to remove.
3. Click the dropdown at the end of the member's row.
4. Click Revoke.
5. When asked to confirm, click Yes, revoke access.
The member is removed and no longer appears in the Members list.
User roles and permissions
All roles and permissions have access to the Overview app. For a detailed breakdown of available user roles and permissions, see below.
|
Role |
Apps with permissions |
|
Administrator (Access the full account, except for viewing payment information, adding/removing account members, or canceling subscriptions) |
|
|
Super Administrator - All Privileges (Edit any Cloudflare setting, make purchases, update billing, and manage memberships, revoke access of other Super Administrators) |
|
|
Administrator Read Only Can access the full account in read only mode. |
|
|
Analytics (Read analytics) |
|
|
DNS (Edit DNS records) |
|
|
SSL/TLS, Caching, Performance, Page Rules, and Customization (Edit most Cloudflare settings except for DNS and Firewall) |
|
|
Firewall (Edit WAF, IP Firewall, and Zone Lockdown settings) |
|
|
Cloudflare Access (Edit Cloudflare Access policies) |
|
|
Cloudflare Workers (Edit Cloudflare Workers) |
|
|
Cache Purge (Purge the edge cache) |
|
|
Stream (Can edit Cloudflare Stream media) |
|
|
Load Balancer (Edit Load Balancers, Pools, Origins, and Health Checks) |
|
|
Log Share (Edit Enterprise Log Share configuration) |
|
|
Billing (Edit the account billing profile and subscriptions) |
|
|
Audit Log Viewer (Can view audit logs) |
|
Change Super Administrator
If you or someone in your organization leaves or loses access to email, you must change who is assigned the Super Administrator role. However, the process differs based on your plan type.
Enterprise customers
Enterprise users can have multiple Super Administrators associated with their accounts. To edit your Super Administrator, add an additional Member to your account and assign the role.
Free, Pro, and Business customers
Free, Pro, or Business customers are only allowed one (1) Super Administrator. To change your Super Administrator, you must change the email address associated with your Cloudflare account to a new email address that is not associated with an existing Cloudflare account.
For example, if a customer wants to change the Super Administrator from [email protected] to [email protected], use a temporary email address ([email protected]) as a placeholder.
Use the following process to change the Super Administrator:
- change [email protected] account to [email protected], then
- change [email protected] to [email protected]le.com, and
- finally change [email protected] to [email protected]
The new email address ([email protected]) becomes the Super Administrator for your Cloudflare account.
Best Practices
We recommend the following best practices to maintain uninterrupted access to your Cloudflare account.
Creating an account
The owner of the domain should be the person who creates a Cloudflare account, which automatically makes them the Super Administrator. After the owner creates their account, they can add their domain to their account and invite other users as administrators.
We also recommend securing user access with two-factor authentication (2FA) after creating accounts. For more information on setting up 2FA, see Securing user access with two-factor authentication (2FA).
Add users as an administrator
Add additional users to your account by adding them as administrators. Administrators can complete various tasks, but they cannot edit the membership management and billing settings.
If you work with a web developer who needs to work with your domain, we recommend the Super Administrator add the web developer as an administrator to their account.