Need to manage tenant accounts via API, will parent account API key work?
Hi I am interested in using tenant accounts to manage customers primarly for domains and DNS records via the API. My question is if I create tenant accounts under my main parent account, will the global API key from the parent account give me the permissions needed to manage domains/zones and DNS records in those tenant accounts? Or will I have to have API keys/tokens from each tenant account to manage it via the API? Thanks!!!
2 Replies
My understanding is yes, yours as the tenant admin would work:
https://developers.cloudflare.com/tenant/structure/
Once you sign a partner agreement with Cloudflare, we create a special Tenant account and then add your user to that account as a Tenant admin. Cloudflare can add multiple users as Tenant admins upon request. Tenant admins then become the default Super administrator(s) for all accounts and zones contained within the Tenant. This means that each Tenant admin’s user API key can be used to provision accounts based on the catalog specified in your partner agreement.Although they recommend making users/acounts for each customer if you'll be performing many actions to avoid ratelimiting https://developers.cloudflare.com/tenant/get-started/#option-2---access-via-an-interface
If you want greater control over how customers use Cloudflare or if you want your customers to use an existing dashboard of yours that they already know, use the Cloudflare API to build this experience. This means that you will be making API calls to Cloudflare on behalf of your customers. To avoid getting rate limited by our API, Cloudflare recommend that you create accounts and users for each of your customers. Changes made by customer A should go through user A and changes made by customer B should go through user B. This capability is not enabled by default. If you need this functionality, contact Cloudflare Support.
Cloudflare Docs
Tenant structure · Cloudflare Tenant docs
Cloudflare helps Channel and Alliance partners manage their and their customers’ accounts through a Tenant structure.
Cloudflare Docs
Get started · Cloudflare Tenant docs
Having access to Cloudflare’s provisioning capabilities allows you to more easily create and manage Cloudflare accounts. The following steps will get …
@Chaika Much appreciated! I have been trying to contact partners@cloudflare.com about upgrading the account but have heard nothing back. I will try contacting support instead.