Cloudflare released granular, per-Worker authorization with four new roles — Metadata Read-Only, Content Read-Only, Editor, and Admin — available now to all customers1. Users can assign roles to a specific teammate or create scoped API tokens so that an agent or CI/CD workflow can access only a single Worker. Each role applies at three scopes: Developer Platform level, product level, or individual resource level. Cloudflare stated it plans to extend the same resource-level controls to D1, R2, and KV.
Cloudflare Ships Per-Worker Access Controls for Teams and Agents
Cloudflare introduced four new roles enabling per-Worker access controls for teammates and agents, available now to all customers with plans to extend to…