One Screen for All Your Cloudflare Accounts: Organizations Hits Public Beta!

Hey there, I'm Shiichan! Today's story fixes something that used to make enterprise admins quietly cry. Let's dig in!

Cloudflare Blog blog.cloudflare.com

What was announced?

Over on Cloudflare's Blog, a new management layer called "Organizations" just landed in public beta, letting you manage multiple Cloudflare accounts from one place! It rolls out to enterprise customers first over several days, then expands to pay-as-you-go customers in the coming months.

Big companies often split accounts by team or function, and now you can see all of them from a single dashboard.

The story so far

To honor the principle of least privilege, splitting into one account per team was the go-to approach. Roles stayed nicely separated, but management got painful.

The article puts it this way:

The principle of least privilege is one of the driving factors behind enterprises using multiple accounts.

Any admin who needed to pull reports or set policies had to be invited into every single account with the right permissions. Worse, another admin could revoke that access, so the setup was fragile.

What changes

With Organizations, you manage all of your company's accounts from one console. A new organization-level role called "Org Super Administrator" grants Super Administrator-level access across every account in the org, without having to be a member of each individual account.

The nice part is that no organization is created behind your back. A Super Administrator receives an invitation and claims their company's org in an opt-in flow, so existing users never silently gain more power. The article drives this home:

This process ensures that no user ever gets permission to a Cloudflare account where a Super Administrator was not involved in approving it.

You also get a roll-up HTTP traffic analytics dashboard across all accounts, plus the ability to share and manage WAF and Gateway policies org-wide.

Dive Deep

Under the hood, Organizations builds on the Tenant system originally created for partners, adding an org layer that groups accounts together. Authorization was consolidated into the domain-scoped roles system.

The behind-the-scenes work was huge: 133,000 lines added and 32,000 removed to unify legacy authorization paths. That brought a 27% speedup for permission checks on enumeration calls like /accounts and /zones. Cloudflare calls it one of the largest changes to its permissions system ever.

And it costs nothing extra to use. Today it starts with the first role, "Org Super Administrator," and HTTP analytics, with organization-level audit logs, billing reports, more roles, and self-serve account creation planned across 2026. If you want more, peek at the Organizations developer docs.

The permission foundation also builds on the recently-beta fine-grained permissions work.

Wrap-up

• "Organizations" is in public beta, letting you manage multiple Cloudflare accounts from one screen!
• The new "Org Super Administrator" role manages every account without per-account membership
• Org creation is an invitation-based opt-in, so nobody silently gains power
• Cross-account HTTP analytics and one-shot WAF/Gateway policy sharing are supported
• No extra cost; audit logs and billing reports are coming
• Enterprise first, then pay-as-you-go

If you're an enterprise admin worn out by juggling permissions across piles of accounts, this update lands right where it hurts!