Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ title: Fine-grained Permissioning for Access for Apps, IdPs, & Targets now in Pu
description: Expanding Role-Based-Access-Control with resource-level controls in Cloudflare Zero Trust.
products:
- fundamentals
- access
date: 2025-10-02
---

Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
title: Fine-grained permissions for Access policies and service tokens
description: New resource-scoped roles allow administrators to grant permissions to specific Access policies and service tokens.
products:
- fundamentals
- access
date: 2026-02-13
---

Fine-grained permissions for **Access policies** and **Access service tokens** are available. These new resource-scoped roles expand the existing RBAC model, enabling administrators to grant permissions scoped to individual resources.

### New roles

- **Cloudflare Access policy admin**: Can edit a specific [Access policy](/cloudflare-one/access-controls/policies/) in an account.
- **Cloudflare Access service token admin**: Can edit a specific [Access service token](/cloudflare-one/access-controls/service-credentials/service-tokens/) in an account.

These roles complement the existing resource-scoped roles for Access applications, identity providers, and infrastructure targets.

For more information:

- [Resource-scoped roles](/fundamentals/manage-members/roles/#resource-scoped-roles)
- [Role scopes](/fundamentals/manage-members/scope/)

:::note

Resource-scoped roles is currently in beta.

:::
Loading