Understand how to edit API keys, add additional users, and set access permissions to your Cloudflare account.
Overview
With a multi-user account, you can control multiple websites and invite users to manage Cloudflare settings on those websites. A user can access multiple accounts and have different permissions for each account that they can access.
There are two user roles: Super Administrator and Administrator. Super Administrators can edit all Cloudflare settings, make purchases, update billing, manage memberships and revoke access of other Super Administrators. As the account owner, you are automatically assigned the Super Administrator role.
Administrators can edit all Cloudflare settings except for membership management and billing. When setting up your Cloudflare account, you are automatically assigned the Super Administrator role. For Free, Pro, and Business accounts, each additional member will be automatically assigned the Administrator role.
Set up a Multi-User account
1. Log in to the Cloudflare dashboard.
2. Choose the account that you would like to update.
3. Click the Members tab.
4. Enter the email address of the member you want to invite to your account. Click Invite. That member will receive an email invitation from Cloudflare to join your account.
User roles and permissions
All roles and permissions have access to the Overview app. For a detailed breakdown of available user roles and permissions, see below.
|
Role |
Apps with permissions |
|
Administrator (Access the full account, except for membership management and billing) |
|
|
Super Administrator - All Privileges (Edit any Cloudflare setting, make purchases, update billing, and manage memberships, revoke access of other Super Administrators) |
|
|
Administrator Read Only Can access the full account in read only mode. |
|
|
Analytics (Read analytics) |
|
|
DNS (Edit DNS records) |
|
|
SSL/TLS, Caching, Performance, Page Rules, and Customization (Edit most Cloudflare settings except for DNS and Firewall) |
|
|
Firewall (Edit WAF, IP Firewall, and Zone Lockdown settings) |
|
|
Cloudflare Access (Edit Cloudflare Access policies) |
|
|
Cloudflare Workers (Edit Cloudflare Workers) |
|
|
Cache Purge (Purge the edge cache) |
|
|
Stream (Can edit Cloudflare Stream media) |
|
|
Load Balancer (Edit Load Balancers, Pools, Origins, and Health Checks) |
|
|
Log Share (Edit Enterprise Log Share configuration) |
|
|
Billing (Edit the account billing profile and subscriptions) |
|
|
Audit Log Viewer (Can view audit logs) |
|
Change Super Administrator
If you or someone in your organization leaves or loses access to email, you must change who is assigned the Super Administrator role. However, the process differs based on your plan type.
Enterprise customers
Enterprise users can have multiple Super Administrators associated with their accounts. To edit your Super Administrator, add an additional Member to your account and assign the role.
Free, Pro, and Business customers
Free, Pro, or Business customers are only allowed one (1) Super Administrator. To change your Super Administrator, you must change the email address associated with your Cloudflare account to a new email address that is not associated with an existing Cloudflare account.
For example, if a customer wants to change the Super Administrator from user@example.com to admin@example.com, use a temporary email address (temp@example.com) as a placeholder.
Use the following process to change the Super Administrator:
- change user@example.com account to temp@example.com, then
- change admin@example.com to user@example.com, and
- finally change temp@example.com to admin@example.com.
The new email address (admin@example.com) becomes the Super Administrator for your Cloudflare account.