Setting up Multi-User accounts on Cloudflare

Understand how to edit API keys, add additional users, and set access permissions to your Cloudflare account.


Overview

With a multi-user account, you can control multiple websites and invite users to manage Cloudflare settings on those websites. A user can access multiple accounts and have different permissions for each account that they can access.

There are two user roles: Super Administrator and Administrator. Super Administrators can edit all Cloudflare settings, make purchases, update billing, manage memberships and revoke access of other Super Administrators. As the account owner, you are automatically assigned the Super Administrator role.

Administrators can edit all Cloudflare settings except for membership management and billing. When setting up your Cloudflare account, you are automatically assigned the Super Administrator role. For Free, Pro, and Business accounts, each additional member will be automatically assigned the Administrator role.

The full set of user roles and permissions are only available to Enterprise customers. To enable all Multi-User roles, get in touch with the Cloudflare sales team.

Setting up a Multi-User account

  1. Log in to the Cloudflare dashboard.
  2. Choose the account that you would like to update.dashboard_multipleaccounts.png
  3. Click the Members tab.
  4. Enter the email address of the member you want to invite to your account. Click Invite. That member will receive an email invitation from Cloudflare to join your account.

    members_dashboard.png
If you have a Free, Pro, or Business plan, your Members default to the Administrator role. If you have an Enterprise plan, you can select the role that you would like to assign to your additional members.

User roles and permissions

All roles and permissions have access to the Overview app. For a detailed breakdown of available user roles and permissions, see below.

Only Enterprise users can assign multiple roles to additional members.

 

Role

Apps with permissions

Administrator

(Access the full account, except for membership management and billing)

  • All the same privileges as Super Administrator, except User Management and Billing

Super Administrator - All Privileges

(Edit any Cloudflare setting, make purchases, update billing, and manage memberships, revoke access of other Super Administrators)

  • All apps

Administrator Read Only

Can access the full account in read only mode.

  • All apps

Analytics

(Read analytics)

  • Analytics

DNS

(Edit DNS records)

  • DNS

Crypto, Caching, Performance, Page Rules, and Customization

(Edit most Cloudflare settings except for DNS and Firewall)

  • Crypto
  • Speed
  • Caching
  • Page Rules
  • Network
  • Customization

Firewall

(Edit WAF, IP Firewall, and Zone Lockdown settings)

  • Firewall
  • Traffic

Cloudflare Access

(Edit Cloudflare Access policies)

  • Access

Cloudflare Workers

(Edit Cloudflare Workers)

  • Workers

Cache Purge

(Purge the edge cache)

  • Caching

Stream

(Can edit Cloudflare Stream media)

  • Stream

Load Balancer

(Edit Load Balancers, Pools, Origins, and Health Checks)

  • Firewall
  • Traffic

Log Share

(Edit Enterprise Log Share configuration)

  • Logpush (Beta)

Billing

(Edit the account billing profile and subscriptions)

  • Account Home > Billing
  • Profile > Billing

Audit Log Viewer

(Can view audit logs)

  • Account > Audit Logs

API key

Each user has their own API key that spans all accounts. To retrieve your API key:

  1. Log in to the Cloudflare dashboard.
  2. Under the My Profile dropdown, click My Profile.
  3. Scroll down to the API Keys section.
  4. There are two options: Global API Key and Origin CA Key. Choose the API Key that you would like to view.
To change your API Key, click Change. You will need to complete a Captcha before the change is applied.

api_keys_multiuseraccount.png

The personal API key is not the same as a Hosting Partner API key, and the key from a personal account will not work for the Hosting Partner API. If you're looking for your Hosting Partner API key (also simply referred to as "Host API key"), please follow these instructions.

Two-factor authentication

For any account that you're Super Administrator, you can enable Two-Factor Authentication. To enable two-factor authentication:

  1. Log in to the Cloudflare dashboard.
  2. Under the My Profile dropdown, click My Profile.
  3. Scroll down to the Two-Factor Authentication section.
  4. There are three options: Google Authenticator, Authy, Or TOTP. Choose one and follow the online instructions until you are returned to the My Profile page.

2fa_multiusersetup.png


Related resources

Not finding what you need?

95% of questions can be answered using the search tool. This is the quickest way to get a response.

Powered by Zendesk