Commercial software intelligenceEvidence checked · 2 October 2026
SkuTrace

Commercial product change, preserved as evidence.

SK-2026-228 · Entitlements & feature gating

Cloudflare expands account API-token provisioning beyond Super Administrators

Cloudflare now lets members with the API Token Provisioning role create account API tokens, while created tokens remain limited to the creator's accessible accounts and scopes.

Provisioning role expanded

Commercial transition

Previous stateAccount API token creation was limited to Super Administrators.
→
New stateMembers assigned the API Token Provisioning role can create tokens, and OAuth clients can use account_api_tokens:create, subject to the creator's access.

Who is affected

Cloudflare organizations delegating account API-token creation.

Action required

Assign the provisioning role narrowly and review creator account and scope access before delegation.

Evidence boundary

The change expands the administrative feature gate only; it does not expand a creator's underlying account access or introduce a price change.

Timeline

  1. Role expansion

    Cloudflare expanded token provisioning beyond Super Administrators.

Official sources