Give every teammate and agent the right level of access to your Workers
Sep 15, 2026Dina Kozlov, Anthony Oreglia, Visal In

Summary
This post introduces four new granular roles (Metadata Read-Only, Content Read-Only, Editor, Admin) for managing access to Cloudflare Workers at the resource level. It details how these roles can be applied to specific Workers, API tokens, and user groups, enabling fine-grained least privilege access for both human users and agents. The post also outlines the extension of these roles to other Developer Platform products like D1, R2, and KV, and highlights the improvement in error messages to include contextual information and links to relevant API documentation for required permissions.