1/**
2 * Static catalog of Cloudflare API token permission groups, copied from the
3 * upstream `alchemy` repo so we can offer typed permission-group names without
4 * a network round-trip on every token create/update.
5 *
6 * @see https://developers.cloudflare.com/fundamentals/api/reference/permissions/
7 */
8
9export interface PermissionGroup {
10 id: string;
11 name: string;
12 description: string;
13 scopes: readonly string[];
14}
15
16export const PERMISSION_GROUPS = [
17 {
18 id: "19637fbb73d242c0a92845d8db0b95b1",
19 name: "AI Audit Read",
20 description: "Grants access to reading AI Audit",
21 scopes: ["com.cloudflare.api.account.zone"],
22 },
23 {
24 id: "1ba6ab4cacdb454b913bbb93e1b8cb8c",
25 name: "AI Audit Write",
26 description: "Grants access to reading and editing AI Audit",
27 scopes: ["com.cloudflare.api.account.zone"],
28 },
29 {
30 id: "4dc8917b4b40457d88d3035d5dadb054",
31 name: "AI Gateway Read",
32 description: "Grants access to reading AI Gateways",
33 scopes: ["com.cloudflare.api.account"],
34 },
35 {
36 id: "9e9b428a0bcd46fd80e580b46a69963c",
37 name: "AI Search Index Engine",
38 description: "Grants access to run AI Search Index Engine",
39 scopes: ["com.cloudflare.api.account"],
40 },
41 {
42 id: "644535f4ed854494a59cb289d634b257",
43 name: "AI Gateway Run",
44 description: "Grants access to run AI Gateways",
45 scopes: ["com.cloudflare.api.account"],
46 },
47 {
48 id: "6c8a3737f07f46369c1ea1f22138daaf",
49 name: "AI Gateway Write",
50 description: "Grants access to reading and editing AI Gateways",
51 scopes: ["com.cloudflare.api.account"],
52 },
53 {
54 id: "eb258a38ea634c86a0c89da6b27cb6b6",
55 name: "Access: Apps and Policies Read",
56 description: "Grants read access to Cloudflare Access zone resources",
57 scopes: ["com.cloudflare.api.account.zone"],
58 },
59 {
60 id: "7ea222f6d5064cfa89ea366d7c1fee89",
61 name: "Access: Apps and Policies Read",
62 description:
63 "Grants read access to Cloudflare Access applications and policies",
64 scopes: ["com.cloudflare.api.account"],
65 },
66 {
67 id: "6db4e222e21248ac96a3f4c2a81e3b41",
68 name: "Access: Apps and Policies Revoke",
69 description:
70 "Grants ability to revoke all tokens to Cloudflare Access zone resources",
71 scopes: ["com.cloudflare.api.account.zone"],
72 },
73 {
74 id: "6c9d1cfcfc6840a987d1b5bfb880a841",
75 name: "Access: Apps and Policies Revoke",
76 description:
77 "Grants ability to revoke Cloudflare Access application tokens",
78 scopes: ["com.cloudflare.api.account"],
79 },
80 {
81 id: "959972745952452f8be2452be8cbb9f2",
82 name: "Access: Apps and Policies Write",
83 description: "Grants write access to Cloudflare Access zone resources",
84 scopes: ["com.cloudflare.api.account.zone"],
85 },
86 {
87 id: "1e13c5124ca64b72b1969a67e8829049",
88 name: "Access: Apps and Policies Write",
89 description:
90 "Grants write access to Cloudflare Access applications and policies",
91 scopes: ["com.cloudflare.api.account"],
92 },
93 {
94 id: "b05b28e839c54467a7d6cba5d3abb5a3",
95 name: "Access: Audit Logs Read",
96 description: "Grants read access to Cloudflare Access audit logs",
97 scopes: ["com.cloudflare.api.account"],
98 },
99 {
100 id: "08e61dabe81a422dab0dea6fdef1a98a",
101 name: "Access: Custom Pages Read",
102 description: "Grants read access to Cloudflare Access Custom Pages",
103 scopes: ["com.cloudflare.api.account"],
104 },
105 {
106 id: "4e5fd8ac327b4a358e48c66fcbeb856d",
107 name: "Access: Custom Pages Write",
108 description: "Grants write access to Cloudflare Access Custom Pages",
109 scopes: ["com.cloudflare.api.account"],
110 },
111 {
112 id: "0f4841f80adb4bada5a09493300e7f8d",
113 name: "Access: Device Posture Read",
114 description: "Grants read access to Cloudflare Access Device Posture",
115 scopes: ["com.cloudflare.api.account"],
116 },
117 {
118 id: "2fc1072ee6b743828db668fcb3f9dee7",
119 name: "Access: Device Posture Write",
120 description: "Grants write access to Cloudflare Access Device Posture",
121 scopes: ["com.cloudflare.api.account"],
122 },
123 {
124 id: "4f3196a5c95747b6ad82e34e1d0a694f",
125 name: "Access: Mutual TLS Certificates Read",
126 description: "Grants read access to Cloudflare Access mTLS certificates",
127 scopes: ["com.cloudflare.api.account"],
128 },
129 {
130 id: "29d3afbfd4054af9accdd1118815ed05",
131 name: "Access: Mutual TLS Certificates Write",
132 description: "Grants write access to Cloudflare Access mTLS certificates",
133 scopes: ["com.cloudflare.api.account"],
134 },
135 {
136 id: "26bc23f853634eb4bff59983b9064fde",
137 name: "Access: Organizations, Identity Providers, and Groups Read",
138 description: "Grants read access to Cloudflare Access account resources",
139 scopes: ["com.cloudflare.api.account"],
140 },
141 {
142 id: "7121a0c7e9ed46e3829f9cca2bb572aa",
143 name: "Access: Organizations, Identity Providers, and Groups Revoke",
144 description:
145 "Grants ability to revoke user sessions to Cloudflare Access account resources",
146 scopes: ["com.cloudflare.api.account"],
147 },
148 {
149 id: "bfe0d8686a584fa680f4c53b5eb0de6d",
150 name: "Access: Organizations, Identity Providers, and Groups Write",
151 description: "Grants write access to Cloudflare Access account resources",
152 scopes: ["com.cloudflare.api.account"],
153 },
154 {
155 id: "b8b7514ce5364cd8ac0455f3eb16eb5f",
156 name: "Access: Policy Test Read",
157 description: "Grants read access to Cloudflare Access Policy Tests",
158 scopes: ["com.cloudflare.api.account"],
159 },
160 {
161 id: "6d23f290472f4e6fad5c4398c057c356",
162 name: "Access: Policy Test Write",
163 description: "Grants full access to Cloudflare Access Policy Tests",
164 scopes: ["com.cloudflare.api.account"],
165 },
166 {
167 id: "de99c87e48d642ce8c985d027905b475",
168 name: "Access: Population Read",
169 description: "Grants read access to Cloudflare Access Populations",
170 scopes: ["com.cloudflare.api.account"],
171 },
172 {
173 id: "bc783549a3a741aaa10556faf8b485bb",
174 name: "Access: Population Write",
175 description: "Grants write access to Cloudflare Access Populations",
176 scopes: ["com.cloudflare.api.account"],
177 },
178 {
179 id: "e985ca9351db460faebbe8681c48e560",
180 name: "Access: SCIM logs read",
181 description: "Grants read access to SCIM audit logs",
182 scopes: ["com.cloudflare.api.account"],
183 },
184 {
185 id: "99ff99e4e30247a99d3777a8c4c18541",
186 name: "Access: SSH Auditing Read",
187 description:
188 "Grants read access to Cloudflare Access SSH certificate authorities (CAs)",
189 scopes: ["com.cloudflare.api.account"],
190 },
191 {
192 id: "d30c9ad8b5224e7cb8d41bcb4757effc",
193 name: "Access: SSH Auditing Write",
194 description:
195 "Grants write access to Cloudflare Access SSH certificate authorities (CAs)",
196 scopes: ["com.cloudflare.api.account"],
197 },
198 {
199 id: "91f7ce32fa614d73b7e1fc8f0e78582b",
200 name: "Access: Service Tokens Read",
201 description: "Grants read access to Cloudflare Access Service Tokens",
202 scopes: ["com.cloudflare.api.account"],
203 },
204 {
205 id: "a1c0fec57cf94af79479a6d827fa518c",
206 name: "Access: Service Tokens Write",
207 description: "Grants write access to Cloudflare Access Service Tokens",
208 scopes: ["com.cloudflare.api.account"],
209 },
210 {
211 id: "5e5d3e8efeec49f3afb67bafecbcd511",
212 name: "Account API Gateway",
213 description:
214 "Grants full access to API-Gateway Management (including API Shield) across the whole account",
215 scopes: ["com.cloudflare.api.account"],
216 },
217 {
218 id: "05a2a65760a546439ed29762b163cece",
219 name: "Account API Gateway Read",
220 description:
221 "Grants read access to API-Gateway Management (including API Shield) across the whole account",
222 scopes: ["com.cloudflare.api.account"],
223 },
224 {
225 id: "eb56a6953c034b9d97dd838155666f06",
226 name: "Account API Tokens Read",
227 description: "Grants read access to account API Tokens",
228 scopes: ["com.cloudflare.api.account"],
229 },
230 {
231 id: "5bc3f8b21c554832afc660159ab75fa4",
232 name: "Account API Tokens Write",
233 description: "Grants write access to account API Tokens",
234 scopes: ["com.cloudflare.api.account"],
235 },
236 {
237 id: "b89a480218d04ceb98b4fe57ca29dc1f",
238 name: "Account Analytics Read",
239 description: "Grants read access to analytics",
240 scopes: ["com.cloudflare.api.account"],
241 },
242 {
243 id: "c57ea647ef654b47bc8944fa739b570d",
244 name: "Account Custom Pages Read",
245 description: "Grants read access to account custom pages",
246 scopes: ["com.cloudflare.api.account"],
247 },
248 {
249 id: "8a9d35a7c8504208ad5c3e8d58e6162d",
250 name: "Account Custom Pages Write",
251 description: "Grants write access to account custom pages",
252 scopes: ["com.cloudflare.api.account"],
253 },
254 {
255 id: "cfa964bcdafc4ab39704e7476154e41b",
256 name: "Account DNS Settings Read",
257 description: "Grants read access to Account DNS Settings",
258 scopes: ["com.cloudflare.api.account"],
259 },
260 {
261 id: "dc44f27f48ab405392a5f69fe822bd01",
262 name: "Account DNS Settings Write",
263 description: "Grants write access to Account DNS Settings",
264 scopes: ["com.cloudflare.api.account"],
265 },
266 {
267 id: "de7a688cc47d43bd9ea700b467a09c96",
268 name: "Account Firewall Access Rules Read",
269 description: "Grants read access to account firewall access rules",
270 scopes: ["com.cloudflare.api.account"],
271 },
272 {
273 id: "a416acf9ef5a4af19fb11ed3b96b1fe6",
274 name: "Account Firewall Access Rules Write",
275 description: "Grants write access to account firewall access rules",
276 scopes: ["com.cloudflare.api.account"],
277 },
278 {
279 id: "4f1071168de8466e9808de86febfc516",
280 name: "Account Rule Lists Read",
281 description: "Grants read access to Rule Lists",
282 scopes: ["com.cloudflare.api.account"],
283 },
284 {
285 id: "2edbf20661fd4661b0fe10e9e12f485c",
286 name: "Account Rule Lists Write",
287 description: "Grants write access to Rule Lists",
288 scopes: ["com.cloudflare.api.account"],
289 },
290 {
291 id: "fb39996ee9044d2a8725921e02744b39",
292 name: "Account Rulesets Read",
293 description: "Grants read access to Account Rulesets",
294 scopes: ["com.cloudflare.api.account"],
295 },
296 {
297 id: "56907406c3d548ed902070ec4df0e328",
298 name: "Account Rulesets Write",
299 description: "Grants write access to Account Rulesets",
300 scopes: ["com.cloudflare.api.account"],
301 },
302 {
303 id: "ece81d7757ff406cad61f221a4920d55",
304 name: "Account Security Center Insights Read",
305 description: "Grants read access to Security Center Insights",
306 scopes: ["com.cloudflare.api.account"],
307 },
308 {
309 id: "cfa2e2893226455c9b945914969dff7c",
310 name: "Account Security Center Insights Write",
311 description: "Grants write access to Security Center Insights",
312 scopes: ["com.cloudflare.api.account"],
313 },
314 {
315 id: "c1fde68c7bcc44588cbb6ddbc16d6480",
316 name: "Account Settings Read",
317 description:
318 "Grants read access to Account resources, account membership, and account level features",
319 scopes: ["com.cloudflare.api.account"],
320 },
321 {
322 id: "1af1fa2adc104452b74a9a3364202f20",
323 name: "Account Settings Write",
324 description:
325 "Grants write access to Account resources, account membership, and account level features",
326 scopes: ["com.cloudflare.api.account"],
327 },
328 {
329 id: "56b2af4817c84ad99187911dc3986c23",
330 name: "Account WAF Read",
331 description: "Grants read access to Account WAF",
332 scopes: ["com.cloudflare.api.account"],
333 },
334 {
335 id: "cde8c82463b6414ca06e46b9633f52a6",
336 name: "Account WAF Write",
337 description: "grants write access to account waf",
338 scopes: ["com.cloudflare.api.account"],
339 },
340 {
341 id: "3e4e20ee40b9475dae22201c468fdb70",
342 name: "Account Waiting Rooms Read",
343 description: "Grants read access to Waiting Rooms\n",
344 scopes: ["com.cloudflare.api.account"],
345 },
346 {
347 id: "a7a233f9604845c787d4c8c39ac09c21",
348 name: "Account: SSL and Certificates Read",
349 description:
350 "Grants read access to SSL MTLS certificates or Certificate Store",
351 scopes: ["com.cloudflare.api.account"],
352 },
353 {
354 id: "db37e5f1cb1a4e1aabaef8deaea43575",
355 name: "Account: SSL and Certificates Write",
356 description:
357 "Grants read and write access to SSL MTLS certificates or Certificate Store",
358 scopes: ["com.cloudflare.api.account"],
359 },
360 {
361 id: "d07270cea5484b08ad6440c985af2148",
362 name: "Address Maps Read",
363 description: "Grants read access to Address Maps",
364 scopes: ["com.cloudflare.api.account"],
365 },
366 {
367 id: "6ffe7f4299db4d4cb54f64e0eb12a456",
368 name: "Address Maps Write",
369 description: "Grants write access to Address Maps",
370 scopes: ["com.cloudflare.api.account"],
371 },
372 {
373 id: "151803815e4f47de854c2fb7f8284d57",
374 name: "Agents Gateway Read",
375 description: "Grants access to reading Agents Gateway",
376 scopes: ["com.cloudflare.api.account"],
377 },
378 {
379 id: "82748b814dcd46b9b3e66b8151ba5e95",
380 name: "Agents Gateway Run",
381 description: "Grants access to running Agents Gateway",
382 scopes: ["com.cloudflare.api.account"],
383 },
384 {
385 id: "e84fd345697c4036a14e7810da036e1a",
386 name: "Agents Gateway Write",
387 description: "Grants access to reading and editing Agents Gateway",
388 scopes: ["com.cloudflare.api.account"],
389 },
390 {
391 id: "f3604047d46144d2a3e9cf4ac99d7f16",
392 name: "Allow Request Tracer Read",
393 description: "Allows read access to request tracer API",
394 scopes: ["com.cloudflare.api.account"],
395 },
396 {
397 id: "9c88f9c5bce24ce7af9a958ba9c504db",
398 name: "Analytics Read",
399 description: "Grants read access to analytics",
400 scopes: ["com.cloudflare.api.account.zone"],
401 },
402 {
403 id: "d79c5e2a405b4516a322432287d40c31",
404 name: "Application Security Reports Read",
405 description: "Can read Application Security Reports",
406 scopes: ["com.cloudflare.api.account"],
407 },
408 {
409 id: "094547ab6e77498c8c4dfa87fadd5c51",
410 name: "Apps Write",
411 description: "Grants full access to Cloudflare Apps",
412 scopes: ["com.cloudflare.api.account.zone"],
413 },
414 {
415 id: "d7887c7a417e4cf2a69f1d01c1a1dc3b",
416 name: "Auto Rag Read",
417 description: "Grants access to reading data from Auto Rag",
418 scopes: ["com.cloudflare.api.account"],
419 },
420 {
421 id: "7fb8d27511b34d02994d005b520b679f",
422 name: "Auto Rag Write",
423 description: "Grants access to reading and writing data from Auto Rag",
424 scopes: ["com.cloudflare.api.account"],
425 },
426 {
427 id: "234108c786084936a381bb19b7f4ea65",
428 name: "Auto Rag Write Run Engine",
429 description: "Grants access to run Auto RAG engine",
430 scopes: ["com.cloudflare.api.account"],
431 },
432 {
433 id: "7cf72faf220841aabcfdfab81c43c4f6",
434 name: "Billing Read",
435 description:
436 "Grants read access to billing profile, subscriptions, usage data and access to fetch invoices and entitlements",
437 scopes: ["com.cloudflare.api.account"],
438 },
439 {
440 id: "6c80e02421494afc9ae14414ed442632",
441 name: "Billing Write",
442 description:
443 "Grants write access to billing profile, subscriptions, and access to fetch invoices and entitlements",
444 scopes: ["com.cloudflare.api.account"],
445 },
446 {
447 id: "51be404b56244056868226263a44a632",
448 name: "Bot Management Feedback Report Read",
449 description: "Grants read access to BOT Management Feedback Reports",
450 scopes: ["com.cloudflare.api.account.zone"],
451 },
452 {
453 id: "2002629aaff0454085bf5a201ed70a72",
454 name: "Bot Management Feedback Report Write",
455 description: "Grants write access to BOT Management Feedback Reports",
456 scopes: ["com.cloudflare.api.account.zone"],
457 },
458 {
459 id: "07bea2220b2343fa9fae15656c0d8e88",
460 name: "Bot Management Read",
461 description: "Grants read access to BOT Management",
462 scopes: ["com.cloudflare.api.account.zone"],
463 },
464 {
465 id: "3b94c49258ec4573b06d51d99b6416c0",
466 name: "Bot Management Write",
467 description: "Grants write access to BOT Management",
468 scopes: ["com.cloudflare.api.account.zone"],
469 },
470 {
471 id: "374b03fa229f4eb6b011bb1cd7f235ee",
472 name: "Browser Rendering Read",
473 description: "Grants read access to Browser Rendering API",
474 scopes: ["com.cloudflare.api.account"],
475 },
476 {
477 id: "adddda876faa4a0590f1b23a038976e4",
478 name: "Browser Rendering Write",
479 description: "Grants write access to Browser Rendering API",
480 scopes: ["com.cloudflare.api.account"],
481 },
482 {
483 id: "da5fe84b9c5446a0a5955b673fafa288",
484 name: "CASB Read",
485 description: "Grants read access to Cloudflare CASB",
486 scopes: ["com.cloudflare.api.account"],
487 },
488 {
489 id: "b9ed086b20864ad89c5aac24cdd02365",
490 name: "CASB Write",
491 description: "Grants write access to Cloudflare CASB",
492 scopes: ["com.cloudflare.api.account"],
493 },
494 {
495 id: "47b936e2027140c0a474cac8887b8c29",
496 name: "CF Agents Read",
497 description: "Grants read access to CF Agents",
498 scopes: ["com.cloudflare.api.account"],
499 },
500 {
501 id: "cb142f7fbc3540f0bade0cbe75f606dc",
502 name: "CF Agents Write",
503 description: "Grants write access to CF Agents",
504 scopes: ["com.cloudflare.api.account"],
505 },
506 {
507 id: "e17beae8b8cb423a99b1730f21238bed",
508 name: "Cache Purge",
509 description: "Grants access to purge cache",
510 scopes: ["com.cloudflare.api.account.zone"],
511 },
512 {
513 id: "3245da1cf36c45c3847bb9b483c62f97",
514 name: "Cache Settings Read",
515 description: "Grants read access to cache settings phase",
516 scopes: ["com.cloudflare.api.account.zone"],
517 },
518 {
519 id: "9ff81cbbe65c400b97d92c3c1033cab6",
520 name: "Cache Settings Write",
521 description: "Grants write access to cache settings phase",
522 scopes: ["com.cloudflare.api.account.zone"],
523 },
524 {
525 id: "686ab9a8b3854f25a1474f302d14b68d",
526 name: "Calls Read",
527 description: "Grants read access to Calls configuration",
528 scopes: ["com.cloudflare.api.account"],
529 },
530 {
531 id: "b711942448db4b0aace44d1312f9fdb0",
532 name: "Calls Write",
533 description: "Grants read/write access to Calls configuration",
534 scopes: ["com.cloudflare.api.account"],
535 },
536 {
537 id: "9ade9cfc8f8949bcb2371be2f0ec8db1",
538 name: "China Network Steering Read",
539 description: "Grants read access to China Network Steering",
540 scopes: ["com.cloudflare.api.account"],
541 },
542 {
543 id: "c6f6338ceae545d0b90daaa1fed855e6",
544 name: "China Network Steering Write",
545 description: "Grants write access to China Network Steering",
546 scopes: ["com.cloudflare.api.account"],
547 },
548 {
549 id: "0661ff47aa3a4786beab3b8128e0cd24",
550 name: "Cloud Connector Read",
551 description: "Grants read access to Cloud Connector",
552 scopes: ["com.cloudflare.api.account.zone"],
553 },
554 {
555 id: "eafd71286d0e4fdca404a7b4d203c5c9",
556 name: "Cloud Connector Write",
557 description: "Grants write access to Cloud Connector",
558 scopes: ["com.cloudflare.api.account.zone"],
559 },
560 {
561 id: "9e5a9912439940fca5898b5b8dc6d1a5",
562 name: "Cloud Email Security: Read",
563 description: "Grants read access to Cloudflare Cloud Email Security",
564 scopes: ["com.cloudflare.api.account"],
565 },
566 {
567 id: "a3567c13e074447fb101babac3463566",
568 name: "Cloud Email Security: Write",
569 description: "Grants write access to Cloudflare Cloud Email Security",
570 scopes: ["com.cloudflare.api.account"],
571 },
572 {
573 id: "65ec50cbde3d4c838bbe7500024d5745",
574 name: "Cloudchamber Read",
575 description: "Grants read access to Cloudchamber deployments",
576 scopes: ["com.cloudflare.api.account"],
577 },
578 {
579 id: "26ce6c7d18a346528e7b905d5e269866",
580 name: "Cloudchamber Write",
581 description: "Grants write access to Cloudchamber deployments",
582 scopes: ["com.cloudflare.api.account"],
583 },
584 {
585 id: "00ec19a0d4fa4e4aae23b50bf04c0630",
586 name: "Cloudflare CDS Compute Account Read",
587 description:
588 "Grants read access to Cloudflare CDS compute account resources",
589 scopes: ["com.cloudflare.api.account"],
590 },
591 {
592 id: "9bf884ba0de445dab37ea4a3e1a2c9f1",
593 name: "Cloudflare CDS Compute Account Write",
594 description:
595 "Grants write access to Cloudflare CDS compute account resources",
596 scopes: ["com.cloudflare.api.account"],
597 },
598 {
599 id: "3a1e1ef09dd34271bb44fc4c6a419952",
600 name: "Cloudflare DEX",
601 description: "Grants access to Cloudflare DEX",
602 scopes: ["com.cloudflare.api.account"],
603 },
604 {
605 id: "3b376e0aa52c41cbb6afc9cab945afa8",
606 name: "Cloudflare DEX Read",
607 description: "Grants read access to Cloudflare DEX",
608 scopes: ["com.cloudflare.api.account"],
609 },
610 {
611 id: "92c8dcd551cc42a6a57a54e8f8d3f3e3",
612 name: "Cloudflare DEX Write",
613 description: "Grants full access to Cloudflare DEX",
614 scopes: ["com.cloudflare.api.account"],
615 },
616 {
617 id: "1cd960c063a0448481343372c963d8c7",
618 name: "Cloudflare One Connector: WARP Read",
619 description: "Grants read access to WARP Connectors",
620 scopes: ["com.cloudflare.api.account"],
621 },
622 {
623 id: "5b5c774a5d174ca88d046c8889648b3f",
624 name: "Cloudflare One Connector: WARP Write",
625 description: "Grants write access to WARP Connectors",
626 scopes: ["com.cloudflare.api.account"],
627 },
628 {
629 id: "c1968d31028d4239976ec3bc4750bbf6",
630 name: "Cloudflare One Connector: cloudflared Read",
631 description: "Grants read access to cloudflared connectors",
632 scopes: ["com.cloudflare.api.account"],
633 },
634 {
635 id: "037b9e348b3b42d4b46ea2fcb1cfb3e7",
636 name: "Cloudflare One Connector: cloudflared Write",
637 description: "Grants write access to cloudflared connectors",
638 scopes: ["com.cloudflare.api.account"],
639 },
640 {
641 id: "07cf1c1952a84b13b2cd542f3d2f29ab",
642 name: "Cloudflare One Connectors Read",
643 description: "Grants read access to Cloudflare One connectors",
644 scopes: ["com.cloudflare.api.account"],
645 },
646 {
647 id: "a7030c9c98d544e092d8b099fabb1f06",
648 name: "Cloudflare One Connectors Write",
649 description: "Grants write access to Cloudflare One connectors",
650 scopes: ["com.cloudflare.api.account"],
651 },
652 {
653 id: "4f1276d1e7e34c32a5012bbe02ece86d",
654 name: "Cloudflare One Networks Read",
655 description:
656 "Grants read access to Cloudflare One routes, subnets, and virtual networks",
657 scopes: ["com.cloudflare.api.account"],
658 },
659 {
660 id: "e2980d9241cf4939bbbd74fdc43b9651",
661 name: "Cloudflare One Networks Write",
662 description:
663 "Grants write access to Cloudflare One routes, subnets, and virtual networks",
664 scopes: ["com.cloudflare.api.account"],
665 },
666 {
667 id: "efea2ab8357b47888938f101ae5e053f",
668 name: "Cloudflare Tunnel Read",
669 description: "Grants access to view Cloudflare Tunnels",
670 scopes: ["com.cloudflare.api.account"],
671 },
672 {
673 id: "c07321b023e944ff818fec44d8203567",
674 name: "Cloudflare Tunnel Write",
675 description: "Grants access to create and delete Cloudflare Tunnels",
676 scopes: ["com.cloudflare.api.account"],
677 },
678 {
679 id: "e0e0edfbe8834df3b51424ba4fb7bb5f",
680 name: "Cloudflare Zero Trust Secure DNS Locations Write",
681 description:
682 "Grants access to create and edit secure DNS Locations only in teams (Zero Trust)",
683 scopes: ["com.cloudflare.api.account"],
684 },
685 {
686 id: "cf9353ed7978436e8fb20c03fce26449",
687 name: "Cloudforce One Read",
688 description: "Grants read access to Cloudforce One",
689 scopes: ["com.cloudflare.api.account"],
690 },
691 {
692 id: "677767156f294485b497a8f103172e7d",
693 name: "Cloudforce One Write",
694 description: "Grants read access to Cloudforce One",
695 scopes: ["com.cloudflare.api.account"],
696 },
697 {
698 id: "20e5ea084b2f491c86b8d8d90abff905",
699 name: "Config Settings Read",
700 description: "Grants read access to config settings phase",
701 scopes: ["com.cloudflare.api.account.zone"],
702 },
703 {
704 id: "06f0526e6e464647bd61b63c54935235",
705 name: "Config Settings Write",
706 description: "Grants write access to config settings phase",
707 scopes: ["com.cloudflare.api.account.zone"],
708 },
709 {
710 id: "77efc2c0724d4c4eb94bfd9656247130",
711 name: "Connectivity Directory Admin",
712 description:
713 "Can view, edit, create, and delete Connectivity Directory Services, including the ability to create Services that bind to Cloudflare Tunnel",
714 scopes: ["com.cloudflare.api.account"],
715 },
716 {
717 id: "95fa65ba51fd49c4a6ac4c8c78ebac93",
718 name: "Connectivity Directory Bind",
719 description:
720 "Can read, list, and bind to Connectivity Directory services, as well as read and list Cloudflare Tunnels",
721 scopes: ["com.cloudflare.api.account"],
722 },
723 {
724 id: "8764961c1edb4274be129d630b0b2671",
725 name: "Connectivity Directory Read",
726 description:
727 "Can view Connectivity Directory services and Cloudflare Tunnels",
728 scopes: ["com.cloudflare.api.account"],
729 },
730 {
731 id: "eeffa4d16812430cb4a0ae9e7f46fc24",
732 name: "Constellation Read",
733 description: "Grants read access to Constellation configuration and models",
734 scopes: ["com.cloudflare.api.account"],
735 },
736 {
737 id: "7c81856725af47ce89a790d5fb36f362",
738 name: "Constellation Write",
739 description:
740 "Grants write access to Constellation configuration and models",
741 scopes: ["com.cloudflare.api.account"],
742 },
743 {
744 id: "a2b55cd504d44ef18b7ba6a7f2b8fbb1",
745 name: "Custom Errors Read",
746 description: "Grants read access to custom errors phase",
747 scopes: ["com.cloudflare.api.account.zone"],
748 },
749 {
750 id: "a9dba34cf5814d4ab2007b4ada0045bd",
751 name: "Custom Errors Write",
752 description: "Grants write access to custom errors phase",
753 scopes: ["com.cloudflare.api.account.zone"],
754 },
755 {
756 id: "a2431ca73b7d41f99c53303027392586",
757 name: "Custom Pages Read",
758 description: "Grants read access to custom pages",
759 scopes: ["com.cloudflare.api.account.zone"],
760 },
761 {
762 id: "c244ec076974430a88bda1cdd992d0d9",
763 name: "Custom Pages Write",
764 description: "Grants write access to custom pages",
765 scopes: ["com.cloudflare.api.account.zone"],
766 },
767 {
768 id: "192192df92ee43ac90f2aeeffce67e35",
769 name: "D1 Read",
770 description: "Grants read access to D1 configuration and SQL queries",
771 scopes: ["com.cloudflare.api.account"],
772 },
773 {
774 id: "09b2857d1c31407795e75e3fed8617a1",
775 name: "D1 Write",
776 description: "Grants write access to D1 configuration and SQL queries",
777 scopes: ["com.cloudflare.api.account"],
778 },
779 {
780 id: "dee7c22a57674abea8f942110b094717",
781 name: "DDoS Botnet Feed Read",
782 description: "Grants read access to Botnet Feed reports",
783 scopes: ["com.cloudflare.api.account"],
784 },
785 {
786 id: "0caa90c9b186447397c8b00358d34a76",
787 name: "DDoS Botnet Feed Write",
788 description: "Grants write access to Botnet Feed configuration",
789 scopes: ["com.cloudflare.api.account"],
790 },
791 {
792 id: "af1c363c35ba45b9a8c682ae50eb3f99",
793 name: "DDoS Protection Read",
794 description: "Grants read access to DDoS protection",
795 scopes: ["com.cloudflare.api.account"],
796 },
797 {
798 id: "d44ed14bcc4340b194d3824d60edad3f",
799 name: "DDoS Protection Write",
800 description: "Grants write access to DDoS protection",
801 scopes: ["com.cloudflare.api.account"],
802 },
803 {
804 id: "5f48a472240a4b489a21d43bd19a06e1",
805 name: "DNS Firewall Read",
806 description: "Grants read access to DNS Firewall",
807 scopes: ["com.cloudflare.api.account"],
808 },
809 {
810 id: "da6d2d6f2ec8442eaadda60d13f42bca",
811 name: "DNS Firewall Write",
812 description: "Grants write access to DNS Firewall",
813 scopes: ["com.cloudflare.api.account"],
814 },
815 {
816 id: "82e64a83756745bbbb1c9c2701bf816b",
817 name: "DNS Read",
818 description: "Grants read access to DNS",
819 scopes: ["com.cloudflare.api.account.zone"],
820 },
821 {
822 id: "95d69e8d6d5144bfb0923667355d9f11",
823 name: "DNS View Read",
824 description: "Grants read access to DNS Views",
825 scopes: ["com.cloudflare.api.account"],
826 },
827 {
828 id: "5b7aedd821a548b9bf5a2acabbce98c7",
829 name: "DNS View Write",
830 description: "Grants write access to DNS Views",
831 scopes: ["com.cloudflare.api.account"],
832 },
833 {
834 id: "4755a26eedb94da69e1066d98aa820be",
835 name: "DNS Write",
836 description: "Grants write access to DNS",
837 scopes: ["com.cloudflare.api.account.zone"],
838 },
839 {
840 id: "e199d584e69344eba202452019deafe3",
841 name: "Disable ESC Read",
842 description: "Grants read access to Cloudflare Disable ESC",
843 scopes: ["com.cloudflare.api.account.zone"],
844 },
845 {
846 id: "29eefa0805f94fdfae2b058b5b52f319",
847 name: "Disable ESC Read",
848 description: "Grants read access to Cloudflare Disable ESC",
849 scopes: ["com.cloudflare.api.account"],
850 },
851 {
852 id: "9110d9dd749e464fb9f3961a2064efc5",
853 name: "Disable ESC Write",
854 description: "Grants write access to Cloudflare Disable ESC",
855 scopes: ["com.cloudflare.api.account.zone"],
856 },
857 {
858 id: "18555e39c5ba40d284dde87eda845a90",
859 name: "Disable ESC Write",
860 description: "Grants write access to Cloudflare Disable ESC",
861 scopes: ["com.cloudflare.api.account"],
862 },
863 {
864 id: "f0235726de25444a84f704b7c93afadf",
865 name: "Domain API Gateway",
866 description:
867 "Grants full access to API-Gateway Management (including API Shield)",
868 scopes: ["com.cloudflare.api.account.zone"],
869 },
870 {
871 id: "6ced5d0d69b1422396909a62c38ab41b",
872 name: "Domain API Gateway Read",
873 description:
874 "Grants read access to API-Gateway Management (including API Shield)",
875 scopes: ["com.cloudflare.api.account.zone"],
876 },
877 {
878 id: "6134079371904d8ebd77931c8ca07e50",
879 name: "Domain Page Shield",
880 description: "Grants write access to Page Shield",
881 scopes: ["com.cloudflare.api.account.zone"],
882 },
883 {
884 id: "945315185a8f40518bf3e9e6d0bee126",
885 name: "Domain Page Shield Read",
886 description: "Grants read access to Page Shield",
887 scopes: ["com.cloudflare.api.account.zone"],
888 },
889 {
890 id: "d8e12db741544d1586ec1d6f5d3c7786",
891 name: "Dynamic URL Redirects Read",
892 description: "Grants read access to Dynamic URL Redirect",
893 scopes: ["com.cloudflare.api.account.zone"],
894 },
895 {
896 id: "74e1036f577a48528b78d2413b40538d",
897 name: "Dynamic URL Redirects Write",
898 description: "Grants write access to Dynamic URL Redirect",
899 scopes: ["com.cloudflare.api.account.zone"],
900 },
901 {
902 id: "5272e56105d04b5897466995b9bd4643",
903 name: "Email Routing Addresses Read",
904 description: "Grants read access to Email Routing target addresses\n",
905 scopes: ["com.cloudflare.api.account"],
906 },
907 {
908 id: "e4589eb09e63436686cd64252a3aebeb",
909 name: "Email Routing Addresses Write",
910 description: "Grants full access to Email Routing target addresses\n",
911 scopes: ["com.cloudflare.api.account"],
912 },
913 {
914 id: "1b600d9d8062443e986a973f097e728a",
915 name: "Email Routing Rules Read",
916 description: "Grants read access to Email Routing rules\n",
917 scopes: ["com.cloudflare.api.account.zone"],
918 },
919 {
920 id: "79b3ec0d10ce4148a8f8bdc0cc5f97f2",
921 name: "Email Routing Rules Write",
922 description: "Grants full access to Email Routing rules\n",
923 scopes: ["com.cloudflare.api.account.zone"],
924 },
925 {
926 id: "1047880d37b649b49db4a504a245896f",
927 name: "Email Security DMARC Reports Read",
928 description: "Grants read access to Email Security dmarc reports\n",
929 scopes: ["com.cloudflare.api.account.zone"],
930 },
931 {
932 id: "2eee71c9364c4cacaf469e8370f09056",
933 name: "Email Security DMARC Reports Write",
934 description: "Grants full access to Email Security dmarc reports\n",
935 scopes: ["com.cloudflare.api.account.zone"],
936 },
937 {
938 id: "2d5b4b1f6c89487bb7184c2c1dcd3bf1",
939 name: "Email Sending Read",
940 description: "Grants access to reading data from Email Sending",
941 scopes: ["com.cloudflare.api.account"],
942 },
943 {
944 id: "5df633d6b41c42bcaf5b4a62b9d14b64",
945 name: "Email Sending Write",
946 description: "Grants access to reading and writing data from Email Sending",
947 scopes: ["com.cloudflare.api.account"],
948 },
949 {
950 id: "4ec32dfcb35641c5bb32d5ef1ab963b4",
951 name: "Firewall Services Read",
952 description: "Grants read access to Firewall resources",
953 scopes: ["com.cloudflare.api.account.zone"],
954 },
955 {
956 id: "43137f8d07884d3198dc0ee77ca6e79b",
957 name: "Firewall Services Write",
958 description: "Grants write access to Firewall resources",
959 scopes: ["com.cloudflare.api.account.zone"],
960 },
961 {
962 id: "a2c61201f92a4e06a901f156795388a9",
963 name: "Firewall for AI Read",
964 description: "Grants read access to Firewall for AI settings.",
965 scopes: ["com.cloudflare.api.account.zone"],
966 },
967 {
968 id: "5af6a2f284144e95a89840408439adef",
969 name: "Firewall for AI Write",
970 description: "Grants full access to Firewall for AI settings.",
971 scopes: ["com.cloudflare.api.account.zone"],
972 },
973 {
974 id: "0d24e472a9654642a97df736e8b0d980",
975 name: "Fraud Detection Read",
976 description: "Grants read access to Fraud Detection",
977 scopes: ["com.cloudflare.api.account.zone"],
978 },
979 {
980 id: "685f9605fd4e44ec937b6a0db658e629",
981 name: "Fraud Detection Write",
982 description: "Grants write access to Fraud Detection",
983 scopes: ["com.cloudflare.api.account.zone"],
984 },
985 {
986 id: "6b60a5a87cae475da7e76e77e4209dd5",
987 name: "HTTP Applications Read",
988 description: "Grants read-only access to HTTP Applications",
989 scopes: ["com.cloudflare.api.account"],
990 },
991 {
992 id: "4736c02a9f224c8196ae5b127beae78c",
993 name: "HTTP Applications Write",
994 description: "Grants full access to HTTP Applications",
995 scopes: ["com.cloudflare.api.account"],
996 },
997 {
998 id: "c49f8d15f9f44885a544d945ef5aa6ae",
999 name: "HTTP DDoS Managed Ruleset Read",
1000 description: "Grants read access to HTTP DDoS Managed Ruleset",
1001 scopes: ["com.cloudflare.api.account.zone"],
1002 },
1003 {
1004 id: "b88a3aa889474524bccea5cf18f122bf",
1005 name: "HTTP DDoS Managed Ruleset Write",
1006 description: "Grants write access to HTTP DDoS Managed Ruleset",
1007 scopes: ["com.cloudflare.api.account.zone"],
1008 },
1009 {
1010 id: "fac65912d42144aa86b7dd33281bf79e",
1011 name: "Health Checks Read",
1012 description: "Grants read access to Health Checks",
1013 scopes: ["com.cloudflare.api.account.zone"],
1014 },
1015 {
1016 id: "e0dc25a0fbdf4286b1ea100e3256b0e3",
1017 name: "Health Checks Write",
1018 description: "Grants write access to Health Checks",
1019 scopes: ["com.cloudflare.api.account.zone"],
1020 },
1021 {
1022 id: "4d62ccf834df44808bc9283d65c4e4e9",
1023 name: "Hyperdrive Read",
1024 description: "Grants read access to Hyperdrive configuration",
1025 scopes: ["com.cloudflare.api.account"],
1026 },
1027 {
1028 id: "721b2f51fba74871bd361de65aeb7e03",
1029 name: "Hyperdrive Write",
1030 description: "Grants write access to Hyperdrive configuration",
1031 scopes: ["com.cloudflare.api.account"],
1032 },
1033 {
1034 id: "212c9ff247b9406d990c017482afb3a5",
1035 name: "IOT Read",
1036 description: "Grants read access to IOT devices",
1037 scopes: ["com.cloudflare.api.account"],
1038 },
1039 {
1040 id: "865ebd55bc6d4b109de6813eccfefd13",
1041 name: "IOT Write",
1042 description: "Grants full access to IOT devices",
1043 scopes: ["com.cloudflare.api.account"],
1044 },
1045 {
1046 id: "e763fae6ee95443b8f56f19213c5f2a5",
1047 name: "IP Prefixes: BGP On Demand Read",
1048 description: "Grants access to read ip prefix bgp configuration",
1049 scopes: ["com.cloudflare.api.account"],
1050 },
1051 {
1052 id: "2ae23e4939d54074b7d252d27ce75a77",
1053 name: "IP Prefixes: BGP On Demand Write",
1054 description: "Grants access to read and change ip prefix bgp configuration",
1055 scopes: ["com.cloudflare.api.account"],
1056 },
1057 {
1058 id: "27beb7f8333b41e2b946f0e23cd8091e",
1059 name: "IP Prefixes: Read",
1060 description: "Grants access to read ip prefix settings",
1061 scopes: ["com.cloudflare.api.account"],
1062 },
1063 {
1064 id: "92b8234e99f64e05bbbc59e1dc0f76b6",
1065 name: "IP Prefixes: Write",
1066 description: "Grants access to read/write ip prefix settings",
1067 scopes: ["com.cloudflare.api.account"],
1068 },
1069 {
1070 id: "0cf6473ad41449e7b7b743d14fc20c60",
1071 name: "Images Read",
1072 description: "Grants read access to Images",
1073 scopes: ["com.cloudflare.api.account"],
1074 },
1075 {
1076 id: "618ec6c64a3a42f8b08bdcb147ded4e4",
1077 name: "Images Write",
1078 description: "Grants write access to upload Images",
1079 scopes: ["com.cloudflare.api.account"],
1080 },
1081 {
1082 id: "c6f97eeee13345db8cc00af0953a42de",
1083 name: "Integration Write",
1084 description: "Grants write access to integrations",
1085 scopes: ["com.cloudflare.api.account"],
1086 },
1087 {
1088 id: "df1577df30ee46268f9470952d7b0cdf",
1089 name: "Intel Read",
1090 description: "Grants read access to Intel API",
1091 scopes: ["com.cloudflare.api.account"],
1092 },
1093 {
1094 id: "92209474242d459690e2cdb1985eaa6c",
1095 name: "Intel Write",
1096 description: "Grants write access to Intel API",
1097 scopes: ["com.cloudflare.api.account"],
1098 },
1099 {
1100 id: "4657621393f94f83b8ef94adba382e48",
1101 name: "L4 DDoS Managed Ruleset Read",
1102 description: "Grants read access to L4 DDoS Managed Ruleset",
1103 scopes: ["com.cloudflare.api.account"],
1104 },
1105 {
1106 id: "7a4c3574054a4d0ba7c692893ba8bdd4",
1107 name: "L4 DDoS Managed Ruleset Write",
1108 description: "Grants write access to L4 DDoS Managed Ruleset",
1109 scopes: ["com.cloudflare.api.account"],
1110 },
1111 {
1112 id: "59059f0c977b44f8b1c18e0aaf91c369",
1113 name: "Load Balancers Account Read",
1114 description:
1115 "Grants read access to account load balancers and associated resources",
1116 scopes: ["com.cloudflare.api.account"],
1117 },
1118 {
1119 id: "419ec42810af4659ade77716dbe47bc6",
1120 name: "Load Balancers Account Write",
1121 description:
1122 "Grants write access to account load balancers and associated resources",
1123 scopes: ["com.cloudflare.api.account"],
1124 },
1125 {
1126 id: "e9a975f628014f1d85b723993116f7d5",
1127 name: "Load Balancers Read",
1128 description:
1129 "Grants read access to load balancers and associated resources",
1130 scopes: ["com.cloudflare.api.account.zone"],
1131 },
1132 {
1133 id: "6d7f2f5f5b1d4a0e9081fdc98d432fd1",
1134 name: "Load Balancers Write",
1135 description:
1136 "Grants write access to load balancers and associated resources",
1137 scopes: ["com.cloudflare.api.account.zone"],
1138 },
1139 {
1140 id: "9d24387c6e8544e2bc4024a03991339f",
1141 name: "Load Balancing: Monitors and Pools Read",
1142 description: "Grants read access to account level load balancer resources",
1143 scopes: ["com.cloudflare.api.account"],
1144 },
1145 {
1146 id: "d2a1802cc9a34e30852f8b33869b2f3c",
1147 name: "Load Balancing: Monitors and Pools Write",
1148 description: "Grants write access to account level load balancer resources",
1149 scopes: ["com.cloudflare.api.account"],
1150 },
1151 {
1152 id: "6a315a56f18441e59ed03352369ae956",
1153 name: "Logs Read",
1154 description: "Grants read access to logs and logpush jobs",
1155 scopes: ["com.cloudflare.api.account"],
1156 },
1157 {
1158 id: "c4a30cd58c5d42619c86a3c36c441e2d",
1159 name: "Logs Read",
1160 description: "Grants read access to logs and logpush jobs",
1161 scopes: ["com.cloudflare.api.account.zone"],
1162 },
1163 {
1164 id: "96163bd1b0784f62b3e44ed8c2ab1eb6",
1165 name: "Logs Write",
1166 description: "Grants write access to logpush jobs",
1167 scopes: ["com.cloudflare.api.account"],
1168 },
1169 {
1170 id: "3e0b5820118e47f3922f7c989e673882",
1171 name: "Logs Write",
1172 description: "Grants write access to logpush jobs",
1173 scopes: ["com.cloudflare.api.account.zone"],
1174 },
1175 {
1176 id: "b84a912ebb4a418888fec65f65c8ff3b",
1177 name: "MCP Portals Read",
1178 description: "Grants access to reading MCP Portals",
1179 scopes: ["com.cloudflare.api.account"],
1180 },
1181 {
1182 id: "db3d398df73946acb755c05b69edfc30",
1183 name: "MCP Portals Write",
1184 description: "Grants access to reading and editing MCP Portals",
1185 scopes: ["com.cloudflare.api.account"],
1186 },
1187 {
1188 id: "3a46c728a0a040d5a65cd8e2f3bc6935",
1189 name: "Magic Firewall Packet Captures - Read PCAPs API",
1190 description: "Grants read access to Packet Captures",
1191 scopes: ["com.cloudflare.api.account"],
1192 },
1193 {
1194 id: "4ea7d6421801452dbf07cef853a5ef39",
1195 name: "Magic Firewall Packet Captures - Write PCAPs API",
1196 description: "Grants write access to Packet Captures",
1197 scopes: ["com.cloudflare.api.account"],
1198 },
1199 {
1200 id: "02b71f12bb0748e9af8126494e181342",
1201 name: "Magic Firewall Read",
1202 description: "Grants read access to Magic Firewall",
1203 scopes: ["com.cloudflare.api.account"],
1204 },
1205 {
1206 id: "8bd1dac84d3d43e7bfb43145f010a15c",
1207 name: "Magic Firewall Write",
1208 description: "Grants write access to Magic Firewall",
1209 scopes: ["com.cloudflare.api.account"],
1210 },
1211 {
1212 id: "8e6ed1ef6e864ad0ae477ceffa5aa5eb",
1213 name: "Magic Network Monitoring Admin",
1214 description: "Grants admin access to MNM settings",
1215 scopes: ["com.cloudflare.api.account"],
1216 },
1217 {
1218 id: "3d85e9514f944bb4912c5871d92e5af5",
1219 name: "Magic Network Monitoring Config Read",
1220 description: "Grants read access to MNM config and rules",
1221 scopes: ["com.cloudflare.api.account"],
1222 },
1223 {
1224 id: "09c77baecb6341a2b1ca2c62b658d290",
1225 name: "Magic Network Monitoring Config Write",
1226 description:
1227 "Grants write access to MNM rules and update access to account settings",
1228 scopes: ["com.cloudflare.api.account"],
1229 },
1230 {
1231 id: "967ecf860a244dd1911a0331a0af582a",
1232 name: "Magic Transit Read",
1233 description: "Grants read access to Magic Transit",
1234 scopes: ["com.cloudflare.api.account"],
1235 },
1236 {
1237 id: "0bc09a3cd4b54605990df4e307f138e1",
1238 name: "Magic Transit Write",
1239 description: "Grants write access to Magic Transit",
1240 scopes: ["com.cloudflare.api.account"],
1241 },
1242 {
1243 id: "17fc856c4ebe49d4bb70f8e4744398cf",
1244 name: "Magic WAN Read",
1245 description: "Grants read access to Magic WAN",
1246 scopes: ["com.cloudflare.api.account"],
1247 },
1248 {
1249 id: "a1a7389ba7e441dba95852e10970fcc3",
1250 name: "Magic WAN Write",
1251 description: "Grants write access to Magic WAN",
1252 scopes: ["com.cloudflare.api.account"],
1253 },
1254 {
1255 id: "319f5059d33a410da0fac4d35a716157",
1256 name: "Managed headers Read",
1257 description: "Grants read access to managed headers phases",
1258 scopes: ["com.cloudflare.api.account.zone"],
1259 },
1260 {
1261 id: "0fd9d56bc2da43ad8ea22d610dd8cab1",
1262 name: "Managed headers Write",
1263 description: "Grants write access to managed headers phases",
1264 scopes: ["com.cloudflare.api.account.zone"],
1265 },
1266 {
1267 id: "429a068902904c5a9ed9fc267c67da9a",
1268 name: "Mass URL Redirects Read",
1269 description: "Grants read access to Mass URL Redirect",
1270 scopes: ["com.cloudflare.api.account"],
1271 },
1272 {
1273 id: "abe78e2276664f4db588c1f675a77486",
1274 name: "Mass URL Redirects Write",
1275 description: "Grants write access to Mass URL Redirect",
1276 scopes: ["com.cloudflare.api.account"],
1277 },
1278 {
1279 id: "ce18edbdcebf465e9d6d1d2fc80ffd42",
1280 name: "Notifications Read",
1281 description: "Grants read access to notifications",
1282 scopes: ["com.cloudflare.api.account"],
1283 },
1284 {
1285 id: "c3c847c5802d4ce3ba00e3e97b3c8555",
1286 name: "Notifications Write",
1287 description: "Grants write access to Notifications",
1288 scopes: ["com.cloudflare.api.account"],
1289 },
1290 {
1291 id: "7b32a91ece3140d4b3c2c56f23fc8e35",
1292 name: "Origin Read",
1293 description: "Grants read access to origin phase",
1294 scopes: ["com.cloudflare.api.account.zone"],
1295 },
1296 {
1297 id: "a4308c6855c84eb2873e01b6cc85cbb3",
1298 name: "Origin Write",
1299 description: "Grants write access to origin phase",
1300 scopes: ["com.cloudflare.api.account.zone"],
1301 },
1302 {
1303 id: "b415b70a4fd1412886f164451f20405c",
1304 name: "Page Rules Read",
1305 description: "Grants read access to Page Rules",
1306 scopes: ["com.cloudflare.api.account.zone"],
1307 },
1308 {
1309 id: "ed07f6c337da4195b4e72a1fb2c6bcae",
1310 name: "Page Rules Write",
1311 description: "Grants write access to Page Rules",
1312 scopes: ["com.cloudflare.api.account.zone"],
1313 },
1314 {
1315 id: "440e6958bcc947329f8d56328d7322ce",
1316 name: "Page Shield",
1317 description: "Grants write access to Page Shield",
1318 scopes: ["com.cloudflare.api.account"],
1319 },
1320 {
1321 id: "050531528b044d58bbb71666fef7c07c",
1322 name: "Page Shield Read",
1323 description: "Grants read access to Page Shield across the whole account",
1324 scopes: ["com.cloudflare.api.account"],
1325 },
1326 {
1327 id: "87065285ab38463481e72815eefd18c3",
1328 name: "Page Shield Write",
1329 description: "Grants write access to Page Shield",
1330 scopes: ["com.cloudflare.api.account.zone"],
1331 },
1332 {
1333 id: "e247aedd66bd41cc9193af0213416666",
1334 name: "Pages Read",
1335 description: "Grants read access to Cloudflare Pages",
1336 scopes: ["com.cloudflare.api.account"],
1337 },
1338 {
1339 id: "8d28297797f24fb8a0c332fe0866ec89",
1340 name: "Pages Write",
1341 description: "Grants write access to Cloudflare Pages",
1342 scopes: ["com.cloudflare.api.account"],
1343 },
1344 {
1345 id: "14b9cf2f410f4c0c9a16bb10a81c0e0b",
1346 name: "Pipelines Read",
1347 description: "Grants read access to Cloudflare Pipelines",
1348 scopes: ["com.cloudflare.api.account"],
1349 },
1350 {
1351 id: "5606e7405dc542949d949d59993d321f",
1352 name: "Pipelines Send",
1353 description: "Grants access to Send Events to Cloudflare Pipelines",
1354 scopes: ["com.cloudflare.api.account"],
1355 },
1356 {
1357 id: "e34111af393449539859485aa5ddd5bd",
1358 name: "Pipelines Write",
1359 description: "Grants write access to Cloudflare Pipelines",
1360 scopes: ["com.cloudflare.api.account"],
1361 },
1362 {
1363 id: "fd7f886c75a244389e892c4c3c068292",
1364 name: "Pubsub Configuration Read",
1365 description: "Grants read access to Pubsub Configurations\n",
1366 scopes: ["com.cloudflare.api.account"],
1367 },
1368 {
1369 id: "910b6ecca1c5411bb894e787362d1312",
1370 name: "Pubsub Configuration Write",
1371 description: "Grants full access to Pubsub Configurations\n",
1372 scopes: ["com.cloudflare.api.account"],
1373 },
1374 {
1375 id: "84a7755d54c646ca87cd50682a34bf7c",
1376 name: "Queues Read",
1377 description: "Grants read access to Cloudflare Queues",
1378 scopes: ["com.cloudflare.api.account"],
1379 },
1380 {
1381 id: "366f57075ffc42689627bcf8242a1b6d",
1382 name: "Queues Write",
1383 description: "Grants write access to Cloudflare Queues",
1384 scopes: ["com.cloudflare.api.account"],
1385 },
1386 {
1387 id: "dfe525ec7b07472c827d8d009178b2ac",
1388 name: "Radar Read",
1389 description: "Grants access to reading Radar",
1390 scopes: ["com.cloudflare.api.account"],
1391 },
1392 {
1393 id: "de62b15d79cc4d8d9c7b443c656eadbd",
1394 name: "Realtime",
1395 description:
1396 "Grants access to Realtime configuration excluding sensitive data",
1397 scopes: ["com.cloudflare.api.account"],
1398 },
1399 {
1400 id: "ba6ce7d23a9544ccad0816691ba38e21",
1401 name: "Realtime Admin",
1402 description: "Grants admin access to Realtime configuration",
1403 scopes: ["com.cloudflare.api.account"],
1404 },
1405 {
1406 id: "9bb90620717647a39679e1d951f140d6",
1407 name: "Registrar Domains Read",
1408 description: "Grants read access to Cloudflare Registrar domains",
1409 scopes: ["com.cloudflare.api.account"],
1410 },
1411 {
1412 id: "93ae59e7a40c4287a57ff6e501186a63",
1413 name: "Response Compression Read",
1414 description: "Grants read access to the response compression phase",
1415 scopes: ["com.cloudflare.api.account.zone"],
1416 },
1417 {
1418 id: "4bd3fb513a23494aa1341a7e1eb6e080",
1419 name: "Response Compression Write",
1420 description: "Grants write access to the response compression phase",
1421 scopes: ["com.cloudflare.api.account.zone"],
1422 },
1423 {
1424 id: "58abbad6d2ce40abb2594fbe932a2e0e",
1425 name: "Rule Policies Read",
1426 description: "Grants read access to Rule Policies",
1427 scopes: ["com.cloudflare.api.account"],
1428 },
1429 {
1430 id: "61ddc58f1da14f95b33b41213360cbeb",
1431 name: "Rule Policies Write",
1432 description: "Grants write access to Rule Policies",
1433 scopes: ["com.cloudflare.api.account"],
1434 },
1435 {
1436 id: "d5812c023a5048b4882175a28952362d",
1437 name: "SCIM Provisioning",
1438 description: "Grants membership permissions needed for SCIM provisioning",
1439 scopes: ["com.cloudflare.api.account"],
1440 },
1441 {
1442 id: "7b7216b327b04b8fbc8f524e1f9b7531",
1443 name: "SSL and Certificates Read",
1444 description: "Grants read access to SSL configuration and cert management",
1445 scopes: ["com.cloudflare.api.account.zone"],
1446 },
1447 {
1448 id: "c03055bc037c4ea9afb9a9f104b7b721",
1449 name: "SSL and Certificates Write",
1450 description: "Grants write access to SSL configuration and cert management",
1451 scopes: ["com.cloudflare.api.account.zone"],
1452 },
1453 {
1454 id: "1d80f6f165ea47f2b55d4a393fd697de",
1455 name: "SSO Connector Read",
1456 description: "Grants read access to Cloudflare SSO connectors\n",
1457 scopes: ["com.cloudflare.api.account"],
1458 },
1459 {
1460 id: "901ca5e292584c6aa1b4cdb39248bb07",
1461 name: "SSO Connector Write",
1462 description: "Grants write access to Cloudflare SSO connectors\n",
1463 scopes: ["com.cloudflare.api.account"],
1464 },
1465 {
1466 id: "853643ed57244ed1a05a7c024af9ab5a",
1467 name: "Sanitize Read",
1468 description: "Grants read access to sanitization",
1469 scopes: ["com.cloudflare.api.account.zone"],
1470 },
1471 {
1472 id: "89bb8c37d46042e98b84560eaaa6379f",
1473 name: "Sanitize Write",
1474 description: "Grants write access to sanitization",
1475 scopes: ["com.cloudflare.api.account.zone"],
1476 },
1477 {
1478 id: "5e33b7d77788455c9fdf18cbd38ee5a0",
1479 name: "Secrets Store Read",
1480 description: "Grants read access to Secrets Store",
1481 scopes: ["com.cloudflare.api.account"],
1482 },
1483 {
1484 id: "adc8fa2bc6124928a8b3314dc63a1235",
1485 name: "Secrets Store Write",
1486 description: "Grants write access to Secrets Store",
1487 scopes: ["com.cloudflare.api.account"],
1488 },
1489 {
1490 id: "595409c54a24444b80a495620b2d614c",
1491 name: "Select Configuration Read",
1492 description: "Grants read access to select configuration",
1493 scopes: ["com.cloudflare.api.account"],
1494 },
1495 {
1496 id: "235eac9bb64942b49cb805cc851cb000",
1497 name: "Select Configuration Write",
1498 description: "Grants write access to select configuration",
1499 scopes: ["com.cloudflare.api.account"],
1500 },
1501 {
1502 id: "74c654eb4aac40e28d6c6caa4c5aeb3d",
1503 name: "Snippets Read",
1504 description: "Grants read access to Snippets",
1505 scopes: ["com.cloudflare.api.account.zone"],
1506 },
1507 {
1508 id: "dadeaf3abdf14126a77a35e0c92fc36e",
1509 name: "Snippets Write",
1510 description: "Grants write access to Snippets",
1511 scopes: ["com.cloudflare.api.account.zone"],
1512 },
1513 {
1514 id: "de21485a24744b76a004aa153898f7fe",
1515 name: "Stream Read",
1516 description: "Grants read access to Cloudflare Stream",
1517 scopes: ["com.cloudflare.api.account"],
1518 },
1519 {
1520 id: "714f9c13a5684c2885a793f5edb36f59",
1521 name: "Stream Write",
1522 description: "Grants write access to Cloudflare Stream",
1523 scopes: ["com.cloudflare.api.account"],
1524 },
1525 {
1526 id: "a9a99455bf3245f6a5a244f909d74830",
1527 name: "Transform Rules Read",
1528 description: "Grants read access to transform rules",
1529 scopes: ["com.cloudflare.api.account"],
1530 },
1531 {
1532 id: "ae16e88bc7814753a1894c7ce187ab72",
1533 name: "Transform Rules Write",
1534 description: "Grants write access to transform rules",
1535 scopes: ["com.cloudflare.api.account"],
1536 },
1537 {
1538 id: "f0ba3733e746429182fcd40ec648c066",
1539 name: "Trust and Safety Read",
1540 description: "Grants access to read abuse reports and abuse actions",
1541 scopes: ["com.cloudflare.api.account"],
1542 },
1543 {
1544 id: "120f843a9c074f399b830e542e5616b8",
1545 name: "Trust and Safety Write",
1546 description:
1547 "Grants access to interact with abuse reports and abuse actions",
1548 scopes: ["com.cloudflare.api.account"],
1549 },
1550 {
1551 id: "5d78fd7895974fd0bdbbbb079482721b",
1552 name: "Turnstile Sites Read",
1553 description: "Grants read access to Turnstile",
1554 scopes: ["com.cloudflare.api.account"],
1555 },
1556 {
1557 id: "755c05aa014b4f9ab263aa80b8167bd8",
1558 name: "Turnstile Sites Write",
1559 description: "Grants write access to Turnstile",
1560 scopes: ["com.cloudflare.api.account"],
1561 },
1562 {
1563 id: "5d613a610b294788a29572aaac2f254d",
1564 name: "URL Scanner Read",
1565 description: "Grants read access to URL Scanner API",
1566 scopes: ["com.cloudflare.api.account"],
1567 },
1568 {
1569 id: "2a400bcb29154daab509fe07e3facab0",
1570 name: "URL Scanner Write",
1571 description: "Grants write access to URL Scanner API",
1572 scopes: ["com.cloudflare.api.account"],
1573 },
1574 {
1575 id: "1799edaae5db489294430e20d9b519e0",
1576 name: "Vectorize Read",
1577 description: "Grants read access to Vectorize configuration",
1578 scopes: ["com.cloudflare.api.account"],
1579 },
1580 {
1581 id: "64156ba5be47441096c83c7fc17c488b",
1582 name: "Vectorize Write",
1583 description: "Grants write access to Vectorize configuration",
1584 scopes: ["com.cloudflare.api.account"],
1585 },
1586 {
1587 id: "cab5202d07ef47beae788e6bc95cb6fe",
1588 name: "Waiting Rooms Read",
1589 description: "Grants read access to Waiting Rooms\n",
1590 scopes: ["com.cloudflare.api.account.zone"],
1591 },
1592 {
1593 id: "24fc124dc8254e0db468e60bf410c800",
1594 name: "Waiting Rooms Write",
1595 description: "Grants write access to Waiting Rooms\n",
1596 scopes: ["com.cloudflare.api.account.zone"],
1597 },
1598 {
1599 id: "8e31f574901c42e8ad89140b28d42112",
1600 name: "Web3 Hostnames Read",
1601 description: "Grants read access to Web3 Hostnames\n",
1602 scopes: ["com.cloudflare.api.account.zone"],
1603 },
1604 {
1605 id: "5ea6da42edb34811a78d1b007557c0ca",
1606 name: "Web3 Hostnames Write",
1607 description: "Grants write access to Web3 Hostnames\n",
1608 scopes: ["com.cloudflare.api.account.zone"],
1609 },
1610 {
1611 id: "a92d2450e05d4e7bb7d0a64968f83d11",
1612 name: "Workers AI Read",
1613 description: "Grants access to invoke Workers AI models",
1614 scopes: ["com.cloudflare.api.account"],
1615 },
1616 {
1617 id: "bacc64e0f6c34fc0883a1223f938a104",
1618 name: "Workers AI Write",
1619 description: "Grants access to invoke Workers AI models and edit assets",
1620 scopes: ["com.cloudflare.api.account"],
1621 },
1622 {
1623 id: "ad99c5ae555e45c4bef5bdf2678388ba",
1624 name: "Workers CI Read",
1625 description: "Grants read access to Workers CI",
1626 scopes: ["com.cloudflare.api.account"],
1627 },
1628 {
1629 id: "2e095cf436e2455fa62c9a9c2e18c478",
1630 name: "Workers CI Write",
1631 description: "Grants write access to Workers CI",
1632 scopes: ["com.cloudflare.api.account"],
1633 },
1634 {
1635 id: "cfd39eebc07c4e3ea849e4b3d2644637",
1636 name: "Workers Containers Read",
1637 description: "Grants read access to Workers Containers",
1638 scopes: ["com.cloudflare.api.account"],
1639 },
1640 {
1641 id: "bdbcd690c763475a985e8641dddc09f7",
1642 name: "Workers Containers Write",
1643 description: "Grants write access to Workers Containers",
1644 scopes: ["com.cloudflare.api.account"],
1645 },
1646 {
1647 id: "8b47d2786a534c08a1f94ee8f9f599ef",
1648 name: "Workers KV Storage Read",
1649 description: "Grants read access to Cloudflare Workers KV Storage",
1650 scopes: ["com.cloudflare.api.account"],
1651 },
1652 {
1653 id: "f7f0eda5697f475c90846e879bab8666",
1654 name: "Workers KV Storage Write",
1655 description: "Grants write access to Cloudflare Workers KV Storage",
1656 scopes: ["com.cloudflare.api.account"],
1657 },
1658 {
1659 id: "66c1ed49f4ed46098b75696a6d4ee3c9",
1660 name: "Workers Observability Read",
1661 description: "Grants read access to Cloudflare Workers Observability",
1662 scopes: ["com.cloudflare.api.account"],
1663 },
1664 {
1665 id: "29c629fb7b5e4c408ca0f7b545724fcc",
1666 name: "Workers Observability Telemetry Write",
1667 description:
1668 "Grants write access for Telemetry to Cloudflare Workers Observability",
1669 scopes: ["com.cloudflare.api.account"],
1670 },
1671 {
1672 id: "82c075da3f4647a2a03becd0fe240f8a",
1673 name: "Workers Observability Write",
1674 description:
1675 "Grants read and write access to Cloudflare Workers Observability",
1676 scopes: ["com.cloudflare.api.account"],
1677 },
1678 {
1679 id: "45db74139a62490b9b60eb7c4f34994b",
1680 name: "Workers R2 Data Catalog Read",
1681 description: "Grants read access to R2 Data Catalog",
1682 scopes: ["com.cloudflare.api.account"],
1683 },
1684 {
1685 id: "d229766a2f7f4d299f20eaa8c9b1fde9",
1686 name: "Workers R2 Data Catalog Write",
1687 description: "Grants write access to R2 Data Catalog",
1688 scopes: ["com.cloudflare.api.account"],
1689 },
1690 {
1691 id: "f45430d92e2b4a6cb9f94f2594c141b8",
1692 name: "Workers R2 SQL Read",
1693 description:
1694 "Grants access to read-only SQL queries against R2 Data Catalog",
1695 scopes: ["com.cloudflare.api.account"],
1696 },
1697 {
1698 id: "6a018a9f2fc74eb6b293b0c548f38b39",
1699 name: "Workers R2 Storage Bucket Item Read",
1700 description: "Grants read access to Cloudflare R2 Bucket Scoped Storage",
1701 scopes: ["com.cloudflare.edge.r2.bucket"],
1702 },
1703 {
1704 id: "2efd5506f9c8494dacb1fa10a3e7d5b6",
1705 name: "Workers R2 Storage Bucket Item Write",
1706 description: "Grants write access to Cloudflare R2 Bucket Scoped Storage",
1707 scopes: ["com.cloudflare.edge.r2.bucket"],
1708 },
1709 {
1710 id: "b4992e1108244f5d8bfbd5744320c2e1",
1711 name: "Workers R2 Storage Read",
1712 description: "Grants read access to Cloudflare R2 Storage",
1713 scopes: ["com.cloudflare.api.account"],
1714 },
1715 {
1716 id: "bf7481a1826f439697cb59a20b22293e",
1717 name: "Workers R2 Storage Write",
1718 description: "Grants write access to Cloudflare R2 Storage",
1719 scopes: ["com.cloudflare.api.account"],
1720 },
1721 {
1722 id: "2072033d694d415a936eaeb94e6405b8",
1723 name: "Workers Routes Read",
1724 description:
1725 "Grants read access to Cloudflare Workers and Workers KV Storage",
1726 scopes: ["com.cloudflare.api.account.zone"],
1727 },
1728 {
1729 id: "28f4b596e7d643029c524985477ae49a",
1730 name: "Workers Routes Write",
1731 description:
1732 "Grants write access to Cloudflare Workers and Workers KV Storage",
1733 scopes: ["com.cloudflare.api.account.zone"],
1734 },
1735 {
1736 id: "1a71c399035b4950a1bd1466bbe4f420",
1737 name: "Workers Scripts Read",
1738 description: "Grants read access to Cloudflare Workers scripts",
1739 scopes: ["com.cloudflare.api.account"],
1740 },
1741 {
1742 id: "e086da7e2179491d91ee5f35b3ca210a",
1743 name: "Workers Scripts Write",
1744 description: "Grants write access to Cloudflare Workers scripts",
1745 scopes: ["com.cloudflare.api.account"],
1746 },
1747 {
1748 id: "05880cd1bdc24d8bae0be2136972816b",
1749 name: "Workers Tail Read",
1750 description: "Grants `wrangler tail` read permissions",
1751 scopes: ["com.cloudflare.api.account"],
1752 },
1753 {
1754 id: "cdeb15b336e640a2965df8c65052f1e0",
1755 name: "Zaraz Admin",
1756 description: "Can edit and publish Zaraz settings.",
1757 scopes: ["com.cloudflare.api.account.zone"],
1758 },
1759 {
1760 id: "89d5bf002389496e9994b8c30608b5d0",
1761 name: "Zaraz Edit",
1762 description: "Can edit Zaraz settings.",
1763 scopes: ["com.cloudflare.api.account.zone"],
1764 },
1765 {
1766 id: "5bdbde7e76144204a244274eac3eb0eb",
1767 name: "Zaraz Read",
1768 description: "Grants read access to Zaraz settings.",
1769 scopes: ["com.cloudflare.api.account.zone"],
1770 },
1771 {
1772 id: "3f376c8e6f764a938b848bd01c8995c4",
1773 name: "Zero Trust Read",
1774 description: "Grants read access to Cloudflare Zero Trust resources",
1775 scopes: ["com.cloudflare.api.account"],
1776 },
1777 {
1778 id: "efb81b5cd37d49f3be1da9363a6d7a19",
1779 name: "Zero Trust Report",
1780 description: "Grants reporting access to Cloudflare Zero Trust",
1781 scopes: ["com.cloudflare.api.account"],
1782 },
1783 {
1784 id: "07f91e3e32b647ffae0178d884f23ee0",
1785 name: "Zero Trust Resilience Read",
1786 description:
1787 "Grants read access to Cloudflare Zero Trust Resilience resources",
1788 scopes: ["com.cloudflare.api.account"],
1789 },
1790 {
1791 id: "cc00ebddebca4b8399607562a78df084",
1792 name: "Zero Trust Resilience Write",
1793 description:
1794 "Grants write access to Cloudflare Zero Trust Resilience resources",
1795 scopes: ["com.cloudflare.api.account"],
1796 },
1797 {
1798 id: "b33f02c6f7284e05a6f20741c0bb0567",
1799 name: "Zero Trust Write",
1800 description: "Grants write access to Cloudflare Zero Trust resources",
1801 scopes: ["com.cloudflare.api.account"],
1802 },
1803 {
1804 id: "f5d857f67f144e3c8bacea88c17d4a13",
1805 name: "Zero Trust: PII Read",
1806 description: "Grants read access to Cloudflare Zero Trust PII.",
1807 scopes: ["com.cloudflare.api.account"],
1808 },
1809 {
1810 id: "a1a6298e52584c8fb6313760a30c681e",
1811 name: "Zero Trust: Seats Write",
1812 description:
1813 "Grants write access to the Zero Trust seats your organization can use (and be billed for)",
1814 scopes: ["com.cloudflare.api.account"],
1815 },
1816 {
1817 id: "0a6cfe8cd3ed445e918579e2fb13087b",
1818 name: "Zone DNS Settings Read",
1819 description: "Grants read access to Zone DNS Settings",
1820 scopes: ["com.cloudflare.api.account.zone"],
1821 },
1822 {
1823 id: "c4df38be41c247b3b4b7702e76eadae0",
1824 name: "Zone DNS Settings Write",
1825 description: "Grants write access to Zone DNS Settings",
1826 scopes: ["com.cloudflare.api.account.zone"],
1827 },
1828 {
1829 id: "c8fed203ed3043cba015a93ad1616f1f",
1830 name: "Zone Read",
1831 description: "Grants read access to zone management",
1832 scopes: ["com.cloudflare.api.account.zone"],
1833 },
1834 {
1835 id: "517b21aee92c4d89936c976ba6e4be55",
1836 name: "Zone Settings Read",
1837 description: "Grants read access to zone settings",
1838 scopes: ["com.cloudflare.api.account.zone"],
1839 },
1840 {
1841 id: "3030687196b94b638145a3953da2b699",
1842 name: "Zone Settings Write",
1843 description: "Grants write access to zone settings",
1844 scopes: ["com.cloudflare.api.account.zone"],
1845 },
1846 {
1847 id: "211a4c0feb3e43b3a2d41f1443a433e7",
1848 name: "Zone Transform Rules Read",
1849 description: "Grants read access to transform rules at zone level",
1850 scopes: ["com.cloudflare.api.account.zone"],
1851 },
1852 {
1853 id: "0ac90a90249747bca6b047d97f0803e9",
1854 name: "Zone Transform Rules Write",
1855 description: "Grants write access to transform rules at zone level",
1856 scopes: ["com.cloudflare.api.account.zone"],
1857 },
1858 {
1859 id: "1b1ea24cf0904d33903f0cc7e54e280f",
1860 name: "Zone Versioning Read",
1861 description: "Grants read-only access to Zone Versioning",
1862 scopes: ["com.cloudflare.api.account.zone"],
1863 },
1864 {
1865 id: "c9915d86fbff46af9dd945c0a882294b",
1866 name: "Zone Versioning Write",
1867 description: "Grants full access to Zone Versioning",
1868 scopes: ["com.cloudflare.api.account.zone"],
1869 },
1870 {
1871 id: "dbc512b354774852af2b5a5f4ba3d470",
1872 name: "Zone WAF Read",
1873 description: "Grants read access to Zone WAF",
1874 scopes: ["com.cloudflare.api.account.zone"],
1875 },
1876 {
1877 id: "fb6778dc191143babbfaa57993f1d275",
1878 name: "Zone WAF Write",
1879 description: "Grants write access to Zone WAF",
1880 scopes: ["com.cloudflare.api.account.zone"],
1881 },
1882 {
1883 id: "e6d2666161e84845a636613608cee8d5",
1884 name: "Zone Write",
1885 description: "Grants write access to zone management",
1886 scopes: ["com.cloudflare.api.account.zone"],
1887 },
1888] as const;
1889
1890export type PermissionGroupName = (typeof PERMISSION_GROUPS)[number]["name"];
1891
1892/**
1893 * Lookup map from permission-group name to the first matching permission group.
1894 *
1895 * Some Cloudflare names appear twice (e.g. account-scope and zone-scope variants
1896 * sharing a label). We keep the first occurrence; callers that need a specific
1897 * scope should pass `{ id }` directly instead of using the name shorthand.
1898 */
1899export const PERMISSION_GROUPS_BY_NAME: Record<
1900 PermissionGroupName,
1901 PermissionGroup
1902> = (() => {
1903 const map = {} as Record<PermissionGroupName, PermissionGroup>;
1904 for (const group of PERMISSION_GROUPS) {
1905 if (!(group.name in map)) {
1906 map[group.name as PermissionGroupName] = group;
1907 }
1908 }
1909 return map;
1910})();