Role-Based Access Control Comes to Browser Isolation Policies!

Hi everyone, it's Shii-chan!

Cloudflare Changelog developers.cloudflare.com

I found an update about Zero Trust permissions!

What was announced?

According to the Cloudflare Changelog, Isolation policies now support role-based access control (RBAC).

Because isolation policies are Gateway HTTP policies with the Isolate action, Gateway's account-level and resource-scoped roles apply to them directly.

What changes

You can give people only the policy access they need.

• Use the Zero Trust HTTP Policies Admin account-level role to grant access to all HTTP policies in the account
• Assign a resource-scoped role to let a team member manage a specific isolation policy without exposing other Gateway resources

Dive Deep

Policy settings such as copy/paste, file download/upload, keyboard, and printing are part of the policy object, so they follow the same permissions.

For setup instructions, see "Granular permissions for Gateway" in the docs.

Wrap-up

• Isolation policies support RBAC
• Gateway account-level and resource-scoped roles apply
• Settings like copy/paste, downloads, and printing follow the same permissions

This is for Zero Trust admins who want to split management scope across teams!