Cloudflare Fundamentals - Account members can self-serve create Account API tokens

<p>Account API token creation is no longer limited to Super Administrators. Members with the <strong>API Token Provisioning</strong> role can now create Account API tokens via the Dashboard, API, Terraform, or CF CLI, making it easier for developers and platform teams to provision credentials without depending on a Super Administrator for Account API Token Provisioning.</p> <img src="https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=1540,height=818,format=webp/_astro/2026-10-01-account-api-token-provisioning.Dn0G5DUa.png" alt="Creating an Account API Token via CF CLI" loading="lazy" decoding="async" width="1540" height="818"> <div tabindex="-1" class="heading-wrapper level-h4"><h4 id="whats-new">What's new</h4><a class="anchor-link" href="#whats-new"><span aria-hidden="true" class="anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24"><path fill="currentcolor" d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 0 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 1 0-1.42-1.42Zm8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 0 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 1 0 1.42 1.42l3.88-3.89a4.49 4.49 0 0 0 0-6.33ZM8.83 15.17a1 1 0 0 0 1.1.22 1 1 0 0 0 .32-.22l4.92-4.92a1 1 0 0 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42Z"></path></svg></span></a></div> <ul> <li><strong>Delegated creation</strong>: Members with the <strong>API Token Provisioning</strong> role can create Account API tokens from the dashboard. Administrators can grant this role through the dashboard, API, or Terraform.</li> <li><strong>OAuth support for token creation</strong>: OAuth clients that request the <code>account_api_tokens:create</code> scope, starting with Cloudflare CLI, can create Account API tokens.</li> <li><strong>Account API token permissions limited to the creator’s access at creation time</strong>: Members can only create an Account API Token using the permissions they already have. For OAuth-created tokens, permissions are also limited to the scopes granted during authorization.</li> <li><strong>Creator attribution and visibility</strong>: Account API tokens now include creator metadata. Super Administrators and Administrators can view all Account API tokens in an account, while members with the <strong>API Token Provisioning</strong> role can only view tokens they created.</li> </ul> <p>For more information, refer to <a href="https://developers.cloudflare.com/fundamentals/api/get-started/account-owned-tokens/">Account API tokens</a>, <a href="https://developers.cloudflare.com/fundamentals/api/how-to/create-via-api/">Create tokens via API</a>, and <a href="https://developers.cloudflare.com/fundamentals/manage-members/roles/">Roles</a>.</p>