Cloudflare API | IAM › Resource Groups › Create Resource Group

API Reference

Account & User Management

Permission Groups

Resource Groups

Create Resource Group

Remove Resource Group

Resource Group Details

List Resource Groups

Update Resource Group

Resource Sharing

AI

Certificate Management

Certificate Authorities

Client Certificates

Custom Certificates

Custom Hostnames

Keyless Certificates

MTLS Certificates

Origin CA Certificates

Origin Post Quantum Encryption

Origin TLS Client Auth

Cloudflare One

DNS

Account Custom Nameservers

Domain/Zone Management

IP Addresses

Media

Networking

Magic Network Monitoring

Network Interconnects

Observability

Security Center

Radar

Routing & Performance

Rules

Cloud Connector

Managed Transforms

URL Normalization

Security

Content Scanning

Leaked Credential Checks

Storage & Databases

Threat Intelligence

Brand Protection

Workers & Pages

Browser Rendering

Durable Objects

Workers For Platforms

Shared

IAM

iam

Permission Groups

iam.permission_groups

Methods

Permission Group Details -> { id, meta, name }

get/accounts/{account_id}/iam/permission_groups/{permission_group_id}

Get information about a specific permission group in an account.

List Account Permission Groups -> V4PagePaginationArray<{ id, meta, name }>

get/accounts/{account_id}/iam/permission_groups

List all the permissions groups for an account.

Resource Groups

iam.resource_groups

Methods

Create Resource Group -> { id, meta, scope }

post/accounts/{account_id}/iam/resource_groups

Create a new Resource Group under the specified account.

Security

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example: Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

Accepted Permissions (at least one required)

SCIM Provisioning Account Settings Write

Parameters

account_id: string

(maxLength: 32)

Account identifier tag.

Response fields

id: string

Optional

Identifier of the group.

meta: unknown

Optional

Attributes associated to the resource group.

scope: { key, objects }

Optional

A scope is a combination of scope objects which provides additional context.

Request example

curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/iam/resource_groups \
    -H 'Content-Type: application/json' \
    -H "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    -H "X-Auth-Key: $CLOUDFLARE_API_KEY" \
    -d '{
      "scope": {
        "key": "com.cloudflare.api.account.eb78d65290b24279ba6f44721b3ea3c4",
        "objects": [
          {
            "key": "com.cloudflare.api.account.zone.23f8d65290b24279ba6f44721b3eaad5"
          }
        ]
      },
      "meta": {
        "editable": "false"
      }
    }'

200Example

{
  "meta": {
    "editable": "false"
  },
  "scope": {
    "key": "com.cloudflare.api.account.eb78d65290b24279ba6f44721b3ea3c4",
    "objects": [
      {
        "key": "com.cloudflare.api.account.zone.23f8d65290b24279ba6f44721b3eaad5"
      }
    ]
  }
}

Remove Resource Group -> Envelope<{ id }>

delete/accounts/{account_id}/iam/resource_groups/{resource_group_id}

Remove a resource group from an account.

Resource Group Details -> { id, scope, meta, 1 more... }

get/accounts/{account_id}/iam/resource_groups/{resource_group_id}

Get information about a specific resource group in an account.

List Resource Groups -> V4PagePaginationArray<{ id, scope, meta, 1 more... }>

get/accounts/{account_id}/iam/resource_groups

List all the resource groups for an account.

Update Resource Group -> { id, scope, meta, 1 more... }

put/accounts/{account_id}/iam/resource_groups/{resource_group_id}

Modify an existing resource group.