Cloudflare adds granular authz to Workers with four roles for teammates and agents
dinasaur_404 · x · 2026-09-15
Cloudflare launched granular authorization for Workers, letting you grant a teammate or agent access to a single Worker without exposing other account resources. Four new roles ship at launch:
- Metadata Read-Only: settings, metrics, logs, and traces only — no source code or data — ideal for debugging agents.
- Content Read-Only: can read Worker code, settings, and observability data but cannot modify or deploy — for code review agents.
- Editor: read/write code and settings with deploy rights, but cannot delete the Worker — fits CI/CD.
- Admin: full control including deploy and delete.
Available now to all customers for users and API tokens; Cloudflare plans to extend the same model to D1, KV, and the rest of the developer platform.
Related event: Cloudflare Workers Launches Granular Authorization and Agent Roles(4 posts)→
More from coding & agent
- ThinkRail, a JetBrains-backed GUI for Pi coding agent, bets on spec-driven development — makingthematrix · 2026-09-15
- Told coding agent 'do not overengineer' — it built an overengineering-prevention framework — granawkins · 2026-09-15
- 96 tools only cost 9 points: agent failures trace to turn-3 error chains, not tool count — EastVersion1226 · 2026-09-15
- Dev builds a Macross 7 game with OpenAI's Astra inside Codex — algo_diver · 2026-09-15
- From ReAct to Terminal Agents: Mapping Two Years of Agentic AI Evolution — Gauri_the_great · 2026-09-15
- Flora ships a video editor MCP, letting the Astra agent drive video editing — round · 2026-09-15