Cloudflare adds access roles scoped to individual Workers

Cloudflare announced resource-level Workers permissions on 15 September. Four roles distinguish metadata read-only, content read-only, editor and administrator access. A teammate or API token can be scoped to a particular Worker instead of receiving the same capabilities across the account. The company said the roles were available to all customers.

An editor can update content and settings without creating or deleting resources. Read-only metadata access exposes operational information without granting access to source code. Some operations still involve another resource: changing a route or custom domain also requires the relevant zone’s Workers Routes permission. The announcement gives teams a more precise way to grant a deployment or debugging task access to its target application while keeping unrelated resources outside that grant.