Browser Isolation, Gateway, Cloudflare One - Role-based access control for Browser Isolation policies

<p><a href="https://developers.cloudflare.com/cloudflare-one/remote-browser-isolation/isolation-policies/">Isolation policies</a> support role-based access control (RBAC). Because isolation policies are Gateway HTTP policies with the <em>Isolate</em> action, Gateway's account-level and resource-scoped roles apply to them directly.</p> <p>Use the <code>Zero Trust HTTP Policies Admin</code> account-level role to grant access to all HTTP policies in the account. You can also assign a <a href="https://developers.cloudflare.com/cloudflare-one/traffic-controls/granular-permissions/">resource-scoped role</a> to let a team member manage a specific isolation policy without exposing other Gateway resources.</p> <p><a href="https://developers.cloudflare.com/cloudflare-one/remote-browser-isolation/isolation-policies/#policy-settings">Policy settings</a> such as copy/paste, file download/upload, keyboard, and printing are part of the policy object and follow the same permissions.</p> <p>For setup instructions, refer to <a href="https://developers.cloudflare.com/cloudflare-one/traffic-controls/granular-permissions/">Granular permissions for Gateway</a>.</p>