Cloudflare adds Worker-level access controls with four roles for teammates and agents
Cloudflare Blog · rss · 2026-09-15
Cloudflare introduced resource-level access controls for Workers: four roles (Metadata Read-Only for debugging without source access, Content Read-Only for code review without deploys, Editor for CI/CD with contained blast radius, Admin including deletion), each assignable at platform, product, or single-resource scope. Routes and custom domains require an extra Workers Routes permission, and 403 errors now link to the required permission docs — useful for scoping agents to least privilege. Available today, with plans to extend roles to D1, R2, and KV.
More from coding & agent
- Production Incident Investigation: A Six-Step Playbook from Triage to Postmortem — _jaydeepkarale · 2026-11-02
- Google's open-sourced "Elephant-Goldfish" workflow separates planning from review to curb sloppy AI output — gaganghotra_ · 2026-11-02
- InfoQ: A Systemic Approach to Memory, Knowledge, and Context in Agentic AI Architectures — AdiPolak · 2026-11-02
- Autonomous's Harness Pro uses an ESP32-P4, not a mini PC, to monitor AI coding agents — dee_hw · 2026-11-02
- RL-trained LFM2.5-24B adapter matches accuracy with 20% fewer tool calls — yb2698 · 2026-11-02
- Debugging production AI agents: error surfaces at step 5, root cause at step 3 — Ok-Machine7983 · 2026-11-02