Understand how to add additional users and set access permissions to your Cloudflare account.
Overview
With a multi-user account, you can control multiple websites and invite users to manage Cloudflare settings on those websites. A user can access multiple accounts and have different permissions for each account that they can access.
There are two user roles: Super Administrator and Administrator. Super Administrators can edit all Cloudflare settings, make purchases, update billing, manage memberships and revoke access of other Super Administrators. As the account owner, you are automatically assigned the Super Administrator role.
Administrators can edit all Cloudflare settings except for membership management and billing. When setting up your Cloudflare account, you are automatically assigned the Super Administrator role. For Free, Pro, and Business accounts, each additional member will be automatically assigned the Administrator role.
NOTE: The full set of user roles and permissions are only available to Enterprise customers. To enable all Multi-User roles, get in touch with the Cloudflare sales team.
Setting up a Multi-User Account
- Log in to the Cloudflare dashboard.
- Choose the account that you would like to update.
- Click the Members tab.
- Enter the email address of the member you want to invite to your account. Click Invite. That member will receive an email invitation from Cloudflare to join your account.
User Roles and Permissions
All roles and permissions have access to the Overview app. For a detailed breakdown of available user roles and permissions, see below.
|
Role |
Apps with permissions |
|
Administrator (Access the full account, except for membership management and billing) |
|
|
Super Administrator - All Privileges (Edit any Cloudflare setting, make purchases, update billing, and manage memberships, revoke access of other Super Administrators) |
|
|
Administrator Read Only Can access the full account in read only mode. |
|
|
Analytics (Read analytics) |
|
|
DNS (Edit DNS records) |
|
|
Crypto, Caching, Performance, Page Rules, and Customization (Edit most Cloudflare settings except for DNS and Firewall) |
|
|
Firewall (Edit WAF, IP Firewall, and Zone Lockdown settings) |
|
|
Cloudflare Access (Edit Cloudflare Access policies) |
|
|
Cloudflare Workers (Edit Cloudflare Workers) |
|
|
Cache Purge (Purge the edge cache) |
|
|
Stream (Can edit Cloudflare Stream media) |
|
|
Load Balancer (Edit Load Balancers, Pools, Origins, and Health Checks) |
|
|
Log Share (Edit Enterprise Log Share configuration) |
|
|
Billing (Edit the account billing profile and subscriptions) |
|
|
Audit Log Viewer (Can view audit logs) |
|
API key
Yes. Each user has their own API key that spans all accounts. To retrieve your API key:
- Log in to the Cloudflare dashboard.
- Under the My Profile dropdown, click My Profile.
- Scroll down to the API Keys section.
- There are two options: Global API Key and Origin CA Key. Choose the API Key that you would like to view.
Two Factor Authentication
Yes. In fact, we encourage it! For any account that you're Super Administrator, you can enable Two-Factor Authentication. To enable two-factor authentication:
- Log in to the Cloudflare dashboard.
- Under the My Profile dropdown, click My Profile.
- Scroll down to the Two-Factor Authentication section.
- There are three options: Google Authenticator, Authy, Or TOTP. Choose one and follow the online instructions until you are returned to the My Profile page.
