ST-2026-106 · Removals & lifecycle enforcement
Cloudflare deprecates the Account Roles API
Cloudflare deprecated the Account Roles API in favor of Permission Groups, requiring integrations to remap persisted Role IDs and adapt to a different response and Account Members policy shape.
Previous state
Integrations read account roles and role details through the Account Roles API, persisted legacy Role IDs, and consumed Role responses with a top-level description plus a permissions object keyed by resource type with edit and read flags.
Current state
The Account Roles API is deprecated and is being replaced by the Permission Groups API. PermissionGroup responses use a meta object with label and scopes and do not return individual permissions; Account Members policy requests must use Permission Group IDs obtained from the replacement API.
Affected users
Who needs to care
Cloudflare account-administration integrations that call the Account Roles endpoints, persist legacy Role IDs, parse the legacy Role response, or submit role assignments through Account Members policy requests.
Required response
What to do
Query the Permission Groups API for replacement IDs, remap persisted legacy Role assignments, update Account Members policy requests to use Permission Group IDs, and adapt response parsing to meta.label and meta.scopes without expecting individual permissions.
Evidence boundary
What the source does not prove
Cloudflare has deprecated but not removed the Account Roles API, and no end-of-life date has been established. The Permission Groups API supports API Token authorization; legacy Email plus API Key authorization remains available for backwards compatibility.
Lifecycle history
Dated event sequence
- Account Roles API deprecated
Cloudflare announced the Permission Groups replacement, the response-schema change and the need to remap legacy Role IDs used in Account Members policies.
Evidence ledger
First-party sources
- 01Cloudflare — Account Role API deprecated
Official Cloudflare changelog · 2026-07-21
Open official source ↗