App Logo
cloudflare.com

Cloudflare: change member role

Change one member's role within one Cloudflare account: looks up the member by email via the account's members API, opens their single account-wide permission policy, toggles off their current role(s) and toggles on the named new role (matched against the account's own role picker), then saves. Throws if the member has anything other than exactly one permission policy (ambiguous case, not handled). Returns previous and new roles.

Input

role required

Exact new role name as shown in the account's permission-policy role picker, e.g. "Administrator", "Billing".

email required

Email address of the member to change.

accountId required

Cloudflare account id the member belongs to.

Output

email required
newRole required
accountId required
previousRoles required

FAQ

Change one member's role within one Cloudflare account: looks up the member by email via the account's members API, opens their single account-wide permission policy, toggles off their current role(s) and toggles on the named new role (matched against the account's own role picker), then saves. Throws if the member has anything other than exactly one permission policy (ambiguous case, not handled). Returns previous and new roles.
Required: accountId, email, role.
It returns email, newRole, accountId, previousRoles.
Yes. It acts as you on cloudflare.com: on your own Chrome it reuses your session, and on a Reduck-hosted browser it loads the cloudflare.com cookies saved by the Reduck extension.
It makes changes on cloudflare.com, like sending, posting or booking something.
Ask an AI agent connected to Reduck to run reduck/cloudflare.com/change_role, or run it from a terminal with the Reduck CLI: npx @reduck-ai/cli@latest run --script reduck/cloudflare.com/change_role
It is part of Reduck's official curated catalogue.

Related scripts

cloudflare.com

Cloudflare: list invoices

List Cloudflare invoices across every account visible to the signed-in user. Returns per account name, accountId, and invoices with date, type, number, amount, status. Accounts with no invoices come back with an empty invoices array rather than an error.

cloudflare.com

Cloudflare login (Google SSO)

Log into the Cloudflare dashboard via the Google button. Dismisses the cookie banner, handles a remembered-account quick sign-in if one exists, drives the chooser, and lands on the dashboard. Best run on your own paired browser rather than a freshly launched one, since it relies on an existing Google session. Known limitation: if Cloudflare forces a 2FA or passkey step-up on the Google redirect, the login can't complete unattended — verify that step manually once in the same browser, then re-run. Optional `email` arg picks which Google account to use.

cloudflare.com

Cloudflare: invite member

Invite a new member into one Cloudflare account by email, granting an account-wide permission policy for a named role (e.g. "Administrator", "Billing") matched against the account's own role picker. Returns the invited email, role, accountId and pending status.

Start building not clicking

Get started for free