Granting Estate Apps access to your Cloudflare

If you're domain is with Cloudflare, you can grant us 3rd party access to temporarily manage your DNS for a new website launch.

You can grant a third party access to your Cloudflare account by inviting us as an account member.

Method 1: Invite a Member to the Dashboard

This is the most common method for giving a person or a team access to the Cloudflare dashboard. It's ideal for granting a web developer or a marketing agency the ability to manage settings like DNS records, firewall rules, or caching.

This method follows the principle of least privilege, ensuring they only have the necessary permissions.

1. Log in to Cloudflare: Sign in to your Cloudflare account.
   
   

2. Go to Members Page: In the top right corner of the dashboard, click on your profile, then select Manage Account and go to the Members page.
   
   

3. Invite the New Member: Click the Invite button.
   
   

4. Enter Details: Enter the email address - accounts@estateapps.co.uk - to invite Estate Apps.
   
   

5. Define Scope and Roles:

   • Scope: Choose whether we should have access to all domains on your account or just a specific domain. In most cases, this will just be a specific domain.
     
     

   • Roles: Select the appropriate roles for Estate Apps. Cloudflare offers a variety of predefined roles (e.g., DNS Administrator, Billing, Firewall) that grant specific permissions. Always choose the most restrictive role that allows us to complete our task. For example, we would only need to manage DNS, so you would grant us the Domain DNS role.
     
     

6. Send Invitation: Review the summary and click Invite. We will receive an email invitation to join your account. 

Important Security Best Practices

• Principle of Least Privilege: Always grant the minimum level of access required to perform a task.
  
  

• Avoid Sharing Credentials: Never share your personal Cloudflare login credentials.
  
  

• Revoke Access: Immediately revoke access for any third party once our work is complete. You can do this by removing us as a member.
  
  

• Enable 2FA: Ensure your own Cloudflare account has two-factor authentication (2FA) enabled for an extra layer of security.