Billing permissions

Access to billing features in the Cloudflare dashboard depends on the role assigned to each account member. This page maps each billing action to the required role.

Roles and billing capabilities

Action	Super Administrator	Administrator	Billing
View invoices and billing history	Yes	Yes	Yes
Download invoice PDFs	Yes	Yes	Yes
View billable usage dashboard	Yes	Yes	Yes
Pay an outstanding balance	Yes	No	Yes
Add or update payment methods	Yes	No	Yes
Change billing address	Yes	No	Yes
Change billing email	Yes	No	Yes
Set up budget alerts	Yes	Yes	Yes
Change or cancel subscriptions	Yes	Yes	No
Upgrade or downgrade a domain plan	Yes	Yes	No
Manage account members and roles	Yes	No	No

Note

The Billing role can view and pay but cannot change subscriptions or plans. To both manage subscriptions and handle payments, a user needs the Super Administrator role.

Assign the Billing role

1. Log in to the Cloudflare dashboard ↗.
2. Select your account.
3. Go to Manage Account > Members.
4. Select Invite to add a new member, or select an existing member to edit their role.
5. Assign the Billing role.

For more detail on account roles, refer to Manage account members.

API access for billing

API tokens used for billing endpoints require the Billing Read or Billing Edit permission. To create an API token with billing access:

1. Go to My Profile > API Tokens.
2. Select Create Token.
3. Use the Custom token template.
4. Under Permissions, select Account > Billing > Read (or Edit).

For full API documentation, refer to the Cloudflare API reference ↗.

Related resources

• Manage account members — Add, remove, and change roles for account members
• API tokens — Create tokens with specific permissions
• How Cloudflare billing works — Billing lifecycle and charge types