---
title: Scoped API tokens · Cloudflare Zero Trust docs
description: The administrators managing policies and groups in Cloudflare Access might be different from the users responsible for configuring WAF custom rules or other Cloudflare settings. Cloudflare Access supports scoped API tokens so that team members and automated systems can manage settings specific to Access without having permission to modify other configurations in Cloudflare.
lastUpdated: 2024-08-13T19:56:56.000Z
source_url:
  html: https://readd-tokens.preview.developers.cloudflare.com/cloudflare-one/api-terraform/scoped-api-tokens/index.md
  md: https://readd-tokens.preview.developers.cloudflare.com/cloudflare-one/api-terraform/scoped-api-tokens/
---

The administrators managing policies and groups in Cloudflare Access might be different from the users responsible for configuring WAF custom rules or other Cloudflare settings. Cloudflare Access supports [scoped API tokens](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/) so that team members and automated systems can manage settings specific to Access without having permission to modify other configurations in Cloudflare.

## Creating a scoped API token

1. In the [Cloudflare dashboard](https://dash.cloudflare.com/), select the user icon > **My Profile**.

2. Select the **API Tokens** tab. The existing tokens will display.

   ![Existing API tokens listed in the API Tokens tab.](https://developers.cloudflare.com/_astro/create-token.ZM2mI61I_1GeLL2.webp)

3. Select **Create Token**.

4. Select **Get started** next to **Create Custom Token**.

5. Select **Account** and **Access: Organizations, Identity Providers, and Groups** in the drop-downs under **Permissions**. You can configure the token to be Read or Write in the third drop-down.

   ![Dropdown displaying read and write options for API token customization.](https://developers.cloudflare.com/_astro/edit-token.CvHTgkfb_4ztkv.webp)

6. In the final section, the token can be applied to a single account or multiple if you are an administrator of multiple Cloudflare accounts.

7. Select **Continue to summary**. The next page will display the token details and instructions on how to use it.

## Review tokens

You can review tokens created in the **API Tokens** tab. In this view, you can roll, revoke, or edit issued tokens.

![A list of created API tokens.](https://developers.cloudflare.com/_astro/view-token.DFPBTWJ4_ZMvuDE.webp)
