API token for subdomain ?
Hi all,
Is it possible to issue a separate API token for each subdomain? I kinda sure its not possible as the token give to the whole zone, but I'm wondering if there's a way? The problem is the admin of subdomain1.domain.com can use the same API key to control the whole zone DNS settings, i.e request a valid ssl cert for *.subdomain2.domain.com, which I don't want to happen. Is there any way around?
2 Replies
The only workaround would be on Enterprise plan you can create a zone/website per subdomain delegated via ns records: https://developers.cloudflare.com/dns/zone-setups/subdomain-setup/
But that would require.. Enterprise
Business can create CNAME Zones but not if the root zone is using CF DNS
Oh, okay
I think I'll provision certs myself, and deliver them to each corresponding admin
Until the day come and we need the upgrade to business, or enterprise 🙂