From 2bd6a74d161c6f7e9a75c59c794fea06dc77cf3b Mon Sep 17 00:00:00 2001 From: Joshua Ye Date: Thu, 15 Aug 2024 16:14:10 -0500 Subject: [PATCH 1/8] Add new Worker roles to roles table --- src/content/docs/fundamentals/setup/manage-members/roles.mdx | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/content/docs/fundamentals/setup/manage-members/roles.mdx b/src/content/docs/fundamentals/setup/manage-members/roles.mdx index ca6ca914e06..803a20cdd40 100644 --- a/src/content/docs/fundamentals/setup/manage-members/roles.mdx +++ b/src/content/docs/fundamentals/setup/manage-members/roles.mdx @@ -34,7 +34,6 @@ Account-scoped roles apply across an entire Cloudflare account, and through all | Cloudflare R2 Admin | Can edit Cloudflare [R2](/r2/) buckets, objects, and associated configurations. | | Cloudflare R2 Read | Can read Cloudflare [R2](/r2/) buckets, objects, and associated configurations. | | Cloudflare Stream | Can edit [Cloudflare Stream](/stream/) media. | -| Cloudflare Workers Admin | Can edit Cloudflare [Workers](/workers/), [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). Also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). | | Cloudflare Zero Trust | Can edit [Cloudflare for Zero Trust](/cloudflare-one/). | | Cloudflare Zero Trust PII | Can access [Cloudflare for Zero Trust](/cloudflare-one/) PII. | | Cloudflare Zero Trust Read Only | Can access [Cloudflare for Zero Trust](/cloudflare-one/) read only mode. | @@ -62,6 +61,10 @@ Account-scoped roles apply across an entire Cloudflare account, and through all | Vectorize Read only | Can read [Vectorize](/vectorize/) configurations. | | Waiting Room Admin | Can edit [Waiting Room](/waiting-room/) configuration. | | Waiting Room Read | Can read [Waiting Room](/waiting-room/) configuration. | +| Workers Admin | Can manage Cloudflare [Workers](/workers/), [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). Also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/).| +| Workers Versions & Deployments Edit | Can develop and deploy Cloudflare [Workers](/workers/) and related developer platform products. | +| Workers Versions Edit | Can develop versions of Cloudflare [Workers](/workers/) and related developer platform products. | +| Workers Read | Can read Cloudflare [Workers](/workers/) and related developer platform products. | | Zaraz Admin | Can edit and publish [Zaraz](/zaraz/) configuration. | | Zaraz Edit | Can edit [Zaraz](/zaraz/) configuration. | | Zaraz Read | Can read [Zaraz](/zaraz/) configuration. | From 0b81cfbadf392ba6b58e8ae4428f7ce2ff9e3451 Mon Sep 17 00:00:00 2001 From: Joshua Ye Date: Thu, 15 Aug 2024 18:00:42 -0500 Subject: [PATCH 2/8] Change order of pages under Workers Platform --- src/content/docs/workers/platform/limits.mdx | 2 +- src/content/docs/workers/platform/storage-options.mdx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/docs/workers/platform/limits.mdx b/src/content/docs/workers/platform/limits.mdx index 8ea6bd9f694..884ef865a82 100644 --- a/src/content/docs/workers/platform/limits.mdx +++ b/src/content/docs/workers/platform/limits.mdx @@ -2,7 +2,7 @@ pcx_content_type: concept title: Limits sidebar: - order: 2 + order: 3 head: [] description: Cloudflare Workers plan and platform limits. diff --git a/src/content/docs/workers/platform/storage-options.mdx b/src/content/docs/workers/platform/storage-options.mdx index 42905a5cc4c..0ea789bffe4 100644 --- a/src/content/docs/workers/platform/storage-options.mdx +++ b/src/content/docs/workers/platform/storage-options.mdx @@ -2,7 +2,7 @@ title: Choose a data or storage product pcx_content_type: concept sidebar: - order: 3 + order: 4 head: - tag: title content: Choosing a data or storage product. From ec48a5710f23cc18c8906fbd1793c9082c9e5110 Mon Sep 17 00:00:00 2001 From: Joshua Ye Date: Thu, 15 Aug 2024 18:00:56 -0500 Subject: [PATCH 3/8] Roles and permissions page under Workers Platform --- .../workers/platform/roles-permissions.mdx | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 src/content/docs/workers/platform/roles-permissions.mdx diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx new file mode 100644 index 00000000000..626a9f2eee6 --- /dev/null +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -0,0 +1,26 @@ +--- +pcx_content_type: reference +title: Roles and permissions +sidebar: + order: 2 + +--- + +When creating a Cloudflare account, you will be given the Super Administrator role. As a Super Administrator, you can invite members to join your account and assign them different roles. + +To check the list of members in your account, or to manage roles and permissions, refer to our [Account setup](/fundamentals/setup/manage-members/) documentation. + +The following roles have permissions not restricted to Cloudflare [Workers](/workers/) but to related developer platform products too. This includes [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). It also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). + +## Workers roles + +Only Super Administrators will be able to assign or remove the following roles from users in their account. They also have all the permissions of a Workers Admin. Scroll to the right to see a full list of permissions for each role. + + + +| | View Code | View Metrics | View Logs | Manage Versions | Manage Bindings | Manage Deployments | Change Routes | Change Subdomain | Delete Worker | +| ----------------------------------- | --------- | ------------ | --------- | --------------- | --------------- | ------------------ | ------------- | ---------------- | ------------- | +| Workers Admin | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Workers Versions & Deployments Edit | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | +| Workers Versions Edit | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | +| Workers Read | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | From c20005c681f51edb420e77e0c3a902a3e05f1761 Mon Sep 17 00:00:00 2001 From: JoshuaYe Date: Fri, 16 Aug 2024 10:51:25 -0500 Subject: [PATCH 4/8] Update src/content/docs/workers/platform/roles-permissions.mdx Co-authored-by: Brendan Irvine-Broque --- src/content/docs/workers/platform/roles-permissions.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx index 626a9f2eee6..a926834c01d 100644 --- a/src/content/docs/workers/platform/roles-permissions.mdx +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -6,7 +6,7 @@ sidebar: --- -When creating a Cloudflare account, you will be given the Super Administrator role. As a Super Administrator, you can invite members to join your account and assign them different roles. +When you create a Cloudflare account, you are given the [Super Administrator role](/fundamentals/setup/manage-members/roles/#account-scoped-roles). As a Super Administrator, you can invite members to join your account and assign them different roles. To check the list of members in your account, or to manage roles and permissions, refer to our [Account setup](/fundamentals/setup/manage-members/) documentation. From 9364e6eb9578ce22f9ec20d4146698226b654b7b Mon Sep 17 00:00:00 2001 From: JoshuaYe Date: Fri, 16 Aug 2024 10:51:46 -0500 Subject: [PATCH 5/8] Update src/content/docs/workers/platform/roles-permissions.mdx Co-authored-by: Brendan Irvine-Broque --- src/content/docs/workers/platform/roles-permissions.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx index a926834c01d..0dc2a4317dc 100644 --- a/src/content/docs/workers/platform/roles-permissions.mdx +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -8,7 +8,7 @@ sidebar: When you create a Cloudflare account, you are given the [Super Administrator role](/fundamentals/setup/manage-members/roles/#account-scoped-roles). As a Super Administrator, you can invite members to join your account and assign them different roles. -To check the list of members in your account, or to manage roles and permissions, refer to our [Account setup](/fundamentals/setup/manage-members/) documentation. +To check the list of members in your account, or to manage roles and permissions, refer to the [Account setup](/fundamentals/setup/manage-members/) documentation. The following roles have permissions not restricted to Cloudflare [Workers](/workers/) but to related developer platform products too. This includes [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). It also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). From 678e4d47f594f9913081c90e3c479786107892ae Mon Sep 17 00:00:00 2001 From: JoshuaYe Date: Fri, 16 Aug 2024 10:53:19 -0500 Subject: [PATCH 6/8] Update src/content/docs/workers/platform/roles-permissions.mdx Co-authored-by: Brendan Irvine-Broque --- src/content/docs/workers/platform/roles-permissions.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx index 0dc2a4317dc..8349b8c9b7d 100644 --- a/src/content/docs/workers/platform/roles-permissions.mdx +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -14,7 +14,7 @@ The following roles have permissions not restricted to Cloudflare [Workers](/wor ## Workers roles -Only Super Administrators will be able to assign or remove the following roles from users in their account. They also have all the permissions of a Workers Admin. Scroll to the right to see a full list of permissions for each role. +Only Super Administrators can assign or remove the following roles from users in their account. From 0c1fc61483c809a63666b1bb1d9e94e7158f894a Mon Sep 17 00:00:00 2001 From: Joshua Ye Date: Fri, 16 Aug 2024 10:54:51 -0500 Subject: [PATCH 7/8] Add Super Admin to table --- src/content/docs/workers/platform/roles-permissions.mdx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx index 8349b8c9b7d..69e0f48f92b 100644 --- a/src/content/docs/workers/platform/roles-permissions.mdx +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -14,12 +14,13 @@ The following roles have permissions not restricted to Cloudflare [Workers](/wor ## Workers roles -Only Super Administrators can assign or remove the following roles from users in their account. +Only Super Administrators will be able to assign or remove the following roles from users in their account. Scroll to the right to see a full list of permissions for each role. | | View Code | View Metrics | View Logs | Manage Versions | Manage Bindings | Manage Deployments | Change Routes | Change Subdomain | Delete Worker | | ----------------------------------- | --------- | ------------ | --------- | --------------- | --------------- | ------------------ | ------------- | ---------------- | ------------- | +| Super Administrator | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | Workers Admin | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | Workers Versions & Deployments Edit | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | | Workers Versions Edit | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | From 314bff14f07fb7c06fa0314c96a2327c7b7010b0 Mon Sep 17 00:00:00 2001 From: Joshua Ye Date: Fri, 16 Aug 2024 13:09:59 -0500 Subject: [PATCH 8/8] Add links to table columns --- src/content/docs/workers/platform/roles-permissions.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/docs/workers/platform/roles-permissions.mdx b/src/content/docs/workers/platform/roles-permissions.mdx index 69e0f48f92b..f475aee5d10 100644 --- a/src/content/docs/workers/platform/roles-permissions.mdx +++ b/src/content/docs/workers/platform/roles-permissions.mdx @@ -10,15 +10,15 @@ When you create a Cloudflare account, you are given the [Super Administrator rol To check the list of members in your account, or to manage roles and permissions, refer to the [Account setup](/fundamentals/setup/manage-members/) documentation. -The following roles have permissions not restricted to Cloudflare [Workers](/workers/) but to related developer platform products too. This includes [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). It also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). - ## Workers roles +The following roles have permissions not restricted to Cloudflare [Workers](/workers/) but to related developer platform products too. This includes [Pages](/pages/), [Durable Objects](/durable-objects/), [KV](/kv/) and [R2](/r2/). It also provides read access to Zones, [Zone Analytics](/analytics/account-and-zone-analytics/zone-analytics/) and [Page Rules](/rules/). + Only Super Administrators will be able to assign or remove the following roles from users in their account. Scroll to the right to see a full list of permissions for each role. -| | View Code | View Metrics | View Logs | Manage Versions | Manage Bindings | Manage Deployments | Change Routes | Change Subdomain | Delete Worker | +| | View Code | View [Metrics](/workers/observability/metrics-and-analytics/) | View [Logs](/workers/observability/logging/) | Manage [Versions](/workers/configuration/versions-and-deployments/#versions) | Manage [Bindings](/workers/runtime-apis/bindings/) | Manage [Deployments](/workers/configuration/versions-and-deployments/#deployments) | Change [Routes](/workers/configuration/routing/routes/) | Change [Subdomain](/workers/configuration/routing/workers-dev/) | Delete Worker | | ----------------------------------- | --------- | ------------ | --------- | --------------- | --------------- | ------------------ | ------------- | ---------------- | ------------- | | Super Administrator | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | Workers Admin | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |