Known Account Entitlements
access
| Entitlement | Type |
|---|---|
| access.custom_pages | bool |
| access.endpoint_integration | bool |
| access.idp_azuread_enabled | bool |
| access.idp_centrify_enabled | bool |
| access.idp_generic_oidc_enabled | bool |
| access.idp_generic_saml_enabled | bool |
| access.idp_googleapps_enabled | bool |
| access.idp_okta_enabled | bool |
| access.idp_onelogin_enabled | bool |
| access.log_retention_days | max_count |
| access.max_apps | max_count |
| access.max_emails_per_rule | max_count |
| access.max_group_size | max_count |
| access.max_groups | max_count |
| access.max_idps | max_count |
| access.max_ips_per_rule | max_count |
| access.max_mtls_root_certs | max_count |
| access.max_rules_per_app | max_count |
| access.max_self_hosted_domains_per_app | max_count |
| access.max_service_tokens | max_count |
| access.self_serve_sso | bool |
| access.service_tokens | bool |
| access.unlimited_ent_seats_allowed | bool |
| access.users_allowed | max_count |
| casb.casb_enabled | bool |
| casb.fedramp_enabled | bool |
| dex.enabled | bool |
| dex.max_application_tests | max_count |
| dlp.datasets_max_cells | max_count |
| dlp.dlp_enabled | bool |
| dlp.max_custom_profiles | max_count |
| riskscoring.riskscoring_enabled | bool |
| swg.additional_categories_enabled | bool |
| swg.additional_locations_enabled | bool |
| swg.additional_policy_assignment_enabled | bool |
| swg.advanced_threat_protection_enabled | bool |
| swg.always_on_browser_isolation_enabled | bool |
| swg.dns_resolver_rules_enabled | bool |
| swg.edit_ip_enabled | bool |
| swg.http_proxy_rules_enabled | bool |
| swg.large_network_limit | max_count |
| swg.list_limit | max_count |
| swg.location_limit | max_count |
| swg.log_push_limited_enabled | bool |
| swg.log_retention_days | max_count |
| swg.max_list_size | max_count |
| swg.overrides_biz_enabled | bool |
| swg.overrides_pro_enabled | bool |
| swg.proxy_pac_endpoints | max_count |
| swg.users_allowed | max_count |
| teams.users_allowed | max_count |
account_custom_ns
| Entitlement | Type |
|---|---|
| account_custom_ns.allowed | bool |
analytics_engine
| Entitlement | Type |
|---|---|
| analytics_engine.max_writes | max_count |
| analytics_engine.not_older_than | max_count |
argo
| Entitlement | Type |
|---|---|
| argo.allow_smart_routing | bool |
| argo.allow_tiered_caching | bool |
| argo.zones | max_count |
bot_management
| Entitlement | Type |
|---|---|
| bot_management.enabled | bool |
bulk
| Entitlement | Type |
|---|---|
| bulk_biz_zones | max_count |
| bulk_ent_zones | max_count |
| bulk_pro_zones | max_count |
cache_reserve
| Entitlement | Type |
|---|---|
| cache_reserve.allowed | bool |
cfone
| Entitlement | Type |
|---|---|
| cfone.briefings_enabled | bool |
challenge_widgets
| Entitlement | Type |
|---|---|
| challenge_widgets | max_count |
| challenge_widgets.any_hostname | bool |
| challenge_widgets.bfm | bool |
| challenge_widgets.china_region | bool |
| challenge_widgets.hostnames | max_count |
| challenge_widgets.invisible_widget | bool |
| challenge_widgets.offlabel | bool |
constellation
| Entitlement | Type |
|---|---|
| constellation.enabled | bool |
contract
| Entitlement | Type |
|---|---|
| contract.customer_enabled | bool |
| contract.self_service_allowed | bool |
ctm
| Entitlement | Type |
|---|---|
| ctm.allow_country_pools | bool |
| ctm.allow_origin_steering | bool |
| ctm.allow_pop_pools | bool |
| ctm.allow_region_pools | bool |
| ctm.allow_traffic_steering | bool |
| ctm.enabled | bool |
| ctm.load_balancers | max_count |
| ctm.max_pools_per_set | max_count |
| ctm.monitor_interval | range |
| ctm.monitors | max_count |
| ctm.origins | max_count |
| ctm.origins_per_pool | max_count |
| ctm.pools | max_count |
| ctm.premium_probes_enabled | bool |
| ctm.probe_internal | bool |
| ctm.probe_regions | max_count |
| ctm.rules_condition_length | max_count |
| ctm.rules_enabled | bool |
| ctm.rules_per_lb | max_count |
| ctm.session_affinity.header.max_headers | max_count |
| ctm.session_affinity.header.max_ttl | max_count |
custom_pages
| Entitlement | Type |
|---|---|
| custom_pages.enabled | bool |
| custom_pages.max_assets | max_count |
d1
| Entitlement | Type |
|---|---|
| d1.enabled | bool |
| d1.max_account_storage_mb | max_count |
| d1.max_databases | max_count |
| d1.max_storage_per_db_mb | max_count |
data_localization_suite
| Entitlement | Type |
|---|---|
| data_localization_suite.regional_services | bool |
ddos
| Entitlement | Type |
|---|---|
| ddos.botnet_feed_allowed | bool |
| ddos.dns_traffic_profiling_allowed | bool |
| ddos.l4_advanced_alerts_allowed | bool |
| ddos.l4_traffic_profiling_allowed | bool |
| ddos.l7_advanced_alerts_allowed | bool |
| ddos.l7_traffic_profiling_allowed | bool |
diagnostics
| Entitlement | Type |
|---|---|
| diagnostics.traceroute_allowed | bool |
dns
| Entitlement | Type |
|---|---|
| authoritative_dns.custom_ns_ttl_allowed | bool |
| authoritative_dns.custom_soa_allowed | bool |
| authoritative_dns.custom_zone_mode_allowed | bool |
| authoritative_dns.multi_provider_allowed | bool |
| authoritative_dns.outgoing_zone_transfers_allowed | bool |
| dns_records_api.bypass_anti_abuse_logic | bool |
| foundation_dns.advanced_nameservers_allowed | bool |
dns_firewall
| Entitlement | Type |
|---|---|
| dns_firewall.max_clusters_allowed | max_count |
| dns_firewall.max_ips_per_cluster | max_count |
enterprise
| Entitlement | Type |
|---|---|
| enterprise.ecp_allowed | bool |
filters
| Entitlement | Type |
|---|---|
| filters.adv_threat_intel_allowed | bool |
| filters.bot_management_enabled | bool |
| filters.mass_redirects_max_list_items | max_count |
| filters.mass_redirects_max_lists | max_count |
| filters.mass_redirects_same_hostpath_limit | max_count |
| filters.max_custom_list_items | max_count |
| filters.max_custom_lists | max_count |
| filters.max_list_items | max_count |
| filters.max_lists | max_count |
flowtrackd
| Entitlement | Type |
|---|---|
| flowtrackd.magic_custom_config_allowed | bool |
graphqlv2
| Entitlement | Type |
|---|---|
| graphql_api_v2.enabled_bot_management | bool |
| graphql_api_v2.enabled_cache_reserve | bool |
| graphql_api_v2.enabled_dos_analytics | bool |
| graphql_api_v2.enabled_network_analytics_magic_ids | bool |
| graphql_api_v2.enabled_network_analytics_magic_transit | bool |
| graphql_api_v2.enabled_network_analytics_spectrum | bool |
http_applications
| Entitlement | Type |
|---|---|
| http_applications.strict_zone_routing | bool |
hyperdrive
| Entitlement | Type |
|---|---|
| hyperdrive.enabled | bool |
| hyperdrive.max_configs | max_count |
image_resizing
| Entitlement | Type |
|---|---|
| image_resizing.enabled | bool |
intel
| Entitlement | Type |
|---|---|
| intel.api_domain_history_limit | max_count |
| intel.api_domain_limit | max_count |
| intel.api_domain_ranking_limit | max_count |
| intel.api_full_enabled | bool |
| intel.api_ip_limit | max_count |
| intel.api_passive_dns_lookback_limit | max_count |
| intel.api_phishing_url_scanner_limit | max_count |
| intel.api_whois_limit | max_count |
| intel.brand_protection.brand_limit | max_count |
| intel.brand_protection.pattern_limit | max_count |
| intel.dash_ip_enabled | bool |
logpull
| Entitlement | Type |
|---|---|
| logpull.rayid_lookup.enabled | bool |
logpush
| Entitlement | Type |
|---|---|
| logpush.access_requests.max_jobs_allowed | max_count |
| logpush.audit_log_events.max_jobs_allowed | max_count |
| logpush.bot_management.enabled | bool |
| logpush.casb_findings.max_jobs_allowed | max_count |
| logpush.device_posture_results.max_jobs_allowed | max_count |
| logpush.dns_firewall_logs.max_jobs_allowed | max_count |
| logpush.gateway_dns.max_jobs_allowed | max_count |
| logpush.gateway_http.max_jobs_allowed | max_count |
| logpush.gateway_network.max_jobs_allowed | max_count |
| logpush.magic_ids_detections.max_jobs_allowed | max_count |
| logpush.network_analytics_logs.max_jobs_allowed | max_count |
| logpush.workers_trace_events.max_jobs_allowed | max_count |
| logpush.zero_trust_network_sessions.max_jobs_allowed | max_count |
logshare
| Entitlement | Type |
|---|---|
| logshare.bot_management.enabled | bool |
ltz
| Entitlement | Type |
|---|---|
| ltz.allow_add_subdomain | bool |
magic_firewall
| Entitlement | Type |
|---|---|
| magic_firewall.pcaps_allowed | bool |
magic_wan_connector
| Entitlement | Type |
|---|---|
| magic_wan_connector.enabled | bool |
managed_hostname
| Entitlement | Type |
|---|---|
| managed_hostname.apex_proxying_access | bool |
| managed_hostname.certificates_account | max_count |
| managed_hostname.custom_origin_server_access | bool |
| managed_hostname.custom_origin_sni_access | bool |
| managed_hostname.enabled | bool |
| managed_hostname.metadata_access | bool |
notifications
| Entitlement | Type |
|---|---|
| notifications.webhooks_enabled | bool |
pages
| Entitlement | Type |
|---|---|
| pages.build_cache_retention_limit_days | max_count |
| pages.build_cache_storage_limit_mb | max_count |
| pages.concurrent_builds | max_count |
| pages.custom_domains_per_project | max_count |
proxy_anything
| Entitlement | Type |
|---|---|
| proxy_anything.enabled | bool |
query_cache
| Entitlement | Type |
|---|---|
| query_cache.enabled | bool |
queues
| Entitlement | Type |
|---|---|
| queues.enabled | bool |
| queues.max_queues | max_count |
| queues.max_retention_hours | max_count |
quota
| Entitlement | Type |
|---|---|
| quota.advanced_certificate_manager | max_count |
r2
| Entitlement | Type |
|---|---|
| r2.enabled | bool |
| r2.fedramp | bool |
| r2.infrequent_access | bool |
rate_limiting
| Entitlement | Type |
|---|---|
| rate_limiting.enabled | bool |
| rate_limiting.log_ref | bool |
| rate_limiting.nat_enabled | bool |
rulesets
| Entitlement | Type |
|---|---|
| rulesets.adv_geoip_allowed | bool |
| rulesets.adv_threat_intel_allowed | bool |
| rulesets.block_customized_response_allowed | bool |
| rulesets.body_inspection_allowed | bool |
| rulesets.bots_management_allowed | bool |
| rulesets.bypass_zone_plan_restrictions | bool |
| rulesets.custom_errors_max_rules | max_count |
| rulesets.ddos_l4_sensitivity_limit | max_count |
| rulesets.ddos_l7_expressions_allowed | bool |
| rulesets.ddos_l7_override_all_allowed | bool |
| rulesets.ddos_l7_sensitivity_limit | max_count |
| rulesets.edge_rules | max_count |
| rulesets.exposed_credentials_check_allowed | bool |
| rulesets.firewall_custom_max_rules_per_ruleset | max_count |
| rulesets.firewall_custom_phase_allowed | bool |
| rulesets.fw_global_rulesets_execute_ddos_l4_allowed | bool |
| rulesets.fw_global_rulesets_execute_ddos_l7_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_ceccr_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_cmr_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_cor_allowed | bool |
| rulesets.fw_global_rulesets_execute_magic_transit_ids_managed_allowed | bool |
| rulesets.fw_global_rulesets_execute_magic_transit_managed_allowed | bool |
| rulesets.hmac_function_allowed | bool |
| rulesets.log_action_allowed | bool |
| rulesets.magic_transit_allowed | bool |
| rulesets.magic_transit_cf_lists_allowed | bool |
| rulesets.magic_transit_max_ip_lists | max_count |
| rulesets.magic_transit_protocols_allowed | bool |
| rulesets.managed_lists_open_proxies_allowed | bool |
| rulesets.matched_data_logging_allowed | bool |
| rulesets.max_ddos_l4_rules | max_count |
| rulesets.max_ddos_l7_rules | max_count |
| rulesets.max_magic_transit_ratelimiting_rules | max_count |
| rulesets.max_magic_transit_ratelimiting_rules_per_colo | max_count |
| rulesets.max_magic_transit_rules_per_ruleset | max_count |
| rulesets.max_owned_custom_rulesets | max_count |
| rulesets.max_ratelimit_rules_per_ruleset | max_count |
| rulesets.max_rules_per_ruleset | max_count |
| rulesets.max_versions_per_custom_ruleset | max_count |
| rulesets.migration_firewall_custom_phase_allowed | bool |
| rulesets.owning_root_rulesets_allowed | bool |
| rulesets.ratelimit_level | max_count |
| rulesets.ratelimit_sampling_period | enum_number |
| rulesets.regex_operator_allowed | bool |
| rulesets.select_configuration_phase_allowed | bool |
saa
| Entitlement | Type |
|---|---|
| saa.allow_auto_accept_invites | bool |
secondary
| Entitlement | Type |
|---|---|
| graphql_api.enabled_lb | bool |
| secondary.create_zone | bool |
secondary_dns
| Entitlement | Type |
|---|---|
| secondary_dns.zones | max_count |
snippets
| Entitlement | Type |
|---|---|
| snippets.snippets_enabled | bool |
staging_certificates
| Entitlement | Type |
|---|---|
| staging_certificates | bool |
stream
| Entitlement | Type |
|---|---|
| images.enabled | bool |
| images.storage | max_count |
| images.transformations_enabled | bool |
| stream.enabled | bool |
| stream.video_storage_capacity | max_count |
subscriptions
| Entitlement | Type |
|---|---|
| subscriptions.rate_plans.access_free | bool |
| subscriptions.rate_plans.argo_free | bool |
| subscriptions.rate_plans.cf_biz_emp | bool |
| subscriptions.rate_plans.load_balancing_free | bool |
| subscriptions.rate_plans.partners_access_basic | bool |
| subscriptions.rate_plans.partners_access_ent | bool |
| subscriptions.rate_plans.partners_access_premium | bool |
| subscriptions.rate_plans.partners_argo | bool |
| subscriptions.rate_plans.partners_biz | bool |
| subscriptions.rate_plans.partners_ent | bool |
| subscriptions.rate_plans.partners_free | bool |
| subscriptions.rate_plans.partners_load_balancing | bool |
| subscriptions.rate_plans.partners_load_balancing_ent | bool |
| subscriptions.rate_plans.partners_pro | bool |
| subscriptions.rate_plans.partners_rate_limiting | bool |
| subscriptions.rate_plans.partners_spectrum | bool |
| subscriptions.rate_plans.partners_stream_basic | bool |
| subscriptions.rate_plans.partners_stream_ent | bool |
| subscriptions.rate_plans.partners_workers_basic | bool |
| subscriptions.rate_plans.partners_workers_ent | bool |
| subscriptions.rate_plans.partners_workers_ss | bool |
| subscriptions.rate_plans.rate_limiting_free | bool |
| subscriptions.rate_plans.stream_free | bool |
| subscriptions.rate_plans.web3_free | bool |
| subscriptions.rate_plans.workers_free | bool |
vector_db
| Entitlement | Type |
|---|---|
| vector_db.enabled | bool |
web3
| Entitlement | Type |
|---|---|
| web3_ethereum.enabled | bool |
| web3_ethereum.hostnames | max_count |
| web3_ethereum.layer_2 | bool |
| web3_ipfs_universal_path.enabled | bool |
| web3_ipfs_universal_path.hostnames | max_count |
| web3_ipfs.enabled | bool |
| web3_ipfs.hostnames | max_count |
| web3_polygon.enabled | bool |
| web3_polygon.hostnames | max_count |
workers
| Entitlement | Type |
|---|---|
| workers.enabled | bool |
| workers.is_enterprise | bool |
| workers.multiscript_enabled | bool |
| workers.unbound_allowed | bool |
zaraz
| Entitlement | Type |
|---|---|
| zaraz.enabled | bool |
zone
| Entitlement | Type |
|---|---|
| zone.advanced_certificate_manager | bool |
| zone.advanced_certificate_manager_quota_override | max_count |
| zone.cname_setup_allowed | bool |
| zone.partial_setup_allowed | bool |
Have an entitlement not covered on the list? Reach out to @CherryJimbo on Twitter or CherryJimbo#0001 on Discord.