Known Account Entitlements

access

EntitlementType
access.custom_pages bool
access.endpoint_integration bool
access.idp_azuread_enabled bool
access.idp_centrify_enabled bool
access.idp_generic_oidc_enabled bool
access.idp_generic_saml_enabled bool
access.idp_googleapps_enabled bool
access.idp_okta_enabled bool
access.idp_onelogin_enabled bool
access.log_retention_days max_count
access.max_apps max_count
access.max_emails_per_rule max_count
access.max_group_size max_count
access.max_groups max_count
access.max_idps max_count
access.max_ips_per_rule max_count
access.max_mtls_root_certs max_count
access.max_rules_per_app max_count
access.max_self_hosted_domains_per_app max_count
access.max_service_tokens max_count
access.self_serve_sso bool
access.service_tokens bool
access.unlimited_ent_seats_allowed bool
access.users_allowed max_count
casb.casb_enabled bool
dex.enabled bool
dex.max_application_tests max_count
dlp.dlp_enabled bool
dlp.max_custom_profiles max_count
riskscoring.riskscoring_enabled bool
swg.additional_categories_enabled bool
swg.additional_locations_enabled bool
swg.additional_policy_assignment_enabled bool
swg.advanced_threat_protection_enabled bool
swg.always_on_browser_isolation_enabled bool
swg.dns_resolver_rules_enabled bool
swg.edit_ip_enabled bool
swg.http_proxy_rules_enabled bool
swg.large_network_limit max_count
swg.list_limit max_count
swg.location_limit max_count
swg.log_push_limited_enabled bool
swg.log_retention_days max_count
swg.max_list_size max_count
swg.overrides_pro_enabled bool
swg.proxy_pac_endpoints max_count
swg.users_allowed max_count
teams.users_allowed max_count

account_custom_ns

EntitlementType
account_custom_ns.allowed bool

analytics_engine

EntitlementType
analytics_engine.max_writes max_count
analytics_engine.not_older_than max_count

argo

EntitlementType
argo.allow_smart_routing bool
argo.allow_tiered_caching bool
argo.zones max_count

bot_management

EntitlementType
bot_management.enabled bool

bulk

EntitlementType
bulk_biz_zones max_count
bulk_ent_zones max_count
bulk_pro_zones max_count

cache_reserve

EntitlementType
cache_reserve.allowed bool

cfone

EntitlementType
cfone.briefings_enabled bool

challenge_widgets

EntitlementType
challenge_widgets max_count
challenge_widgets.any_hostname bool
challenge_widgets.bfm bool
challenge_widgets.china_region bool
challenge_widgets.hostnames max_count
challenge_widgets.offlabel bool

constellation

EntitlementType
constellation.enabled bool

contract

EntitlementType
contract.customer_enabled bool
contract.self_service_allowed bool

ctm

EntitlementType
ctm.allow_country_pools bool
ctm.allow_origin_steering bool
ctm.allow_pop_pools bool
ctm.allow_region_pools bool
ctm.allow_traffic_steering bool
ctm.enabled bool
ctm.load_balancers max_count
ctm.max_pools_per_set max_count
ctm.monitor_interval range
ctm.monitors max_count
ctm.origins max_count
ctm.origins_per_pool max_count
ctm.pools max_count
ctm.premium_probes_enabled bool
ctm.probe_internal bool
ctm.probe_regions max_count
ctm.rules_condition_length max_count
ctm.rules_enabled bool
ctm.rules_per_lb max_count
ctm.session_affinity.header.max_headers max_count
ctm.session_affinity.header.max_ttl max_count

custom_pages

EntitlementType
custom_pages.enabled bool

d1

EntitlementType
d1.enabled bool
d1.max_account_storage_mb max_count
d1.max_databases max_count
d1.max_storage_per_db_mb max_count

ddos

EntitlementType
ddos.botnet_feed_allowed bool
ddos.l4_advanced_alerts_allowed bool
ddos.l4_traffic_profiling_allowed bool
ddos.l7_advanced_alerts_allowed bool
ddos.l7_traffic_profiling_allowed bool

diagnostics

EntitlementType
diagnostics.traceroute_allowed bool

dns

EntitlementType
dns_records_api.bypass_anti_abuse_logic bool

enterprise

EntitlementType
enterprise.ecp_allowed bool

filters

EntitlementType
filters.adv_threat_intel_allowed bool
filters.bot_management_enabled bool
filters.mass_redirects_max_list_items max_count
filters.mass_redirects_max_lists max_count
filters.max_custom_list_items max_count
filters.max_custom_lists max_count
filters.max_list_items max_count
filters.max_lists max_count

flowtrackd

EntitlementType
flowtrackd.magic_custom_config_allowed bool

graphqlv2

EntitlementType
graphql_api_v2.enabled_bot_management bool
graphql_api_v2.enabled_cache_reserve bool
graphql_api_v2.enabled_dos_analytics bool
graphql_api_v2.enabled_network_analytics_magic_ids bool
graphql_api_v2.enabled_network_analytics_magic_transit bool
graphql_api_v2.enabled_network_analytics_spectrum bool

http_applications

EntitlementType
http_applications.strict_zone_routing bool

hyperdrive

EntitlementType
hyperdrive.enabled bool

image_resizing

EntitlementType
image_resizing.enabled bool

intel

EntitlementType
intel.api_domain_history_limit max_count
intel.api_domain_limit max_count
intel.api_domain_ranking_limit max_count
intel.api_full_enabled bool
intel.api_ip_limit max_count
intel.api_passive_dns_lookback_limit max_count
intel.api_phishing_url_scanner_limit max_count
intel.api_whois_limit max_count
intel.brand_protection.brand_limit max_count
intel.brand_protection.pattern_limit max_count
intel.dash_ip_enabled bool

logpull

EntitlementType
logpull.rayid_lookup.enabled bool

logpush

EntitlementType
logpush.access_requests.max_jobs_allowed max_count
logpush.audit_log_events.max_jobs_allowed max_count
logpush.bot_management.enabled bool
logpush.casb_findings.max_jobs_allowed max_count
logpush.device_posture_results.max_jobs_allowed max_count
logpush.dns_firewall_logs.max_jobs_allowed max_count
logpush.gateway_dns.max_jobs_allowed max_count
logpush.gateway_http.max_jobs_allowed max_count
logpush.gateway_network.max_jobs_allowed max_count
logpush.magic_ids_detections.max_jobs_allowed max_count
logpush.network_analytics_logs.max_jobs_allowed max_count
logpush.workers_trace_events.max_jobs_allowed max_count
logpush.zero_trust_network_sessions.max_jobs_allowed max_count

logshare

EntitlementType
logshare.bot_management.enabled bool

ltz

EntitlementType
ltz.allow_add_subdomain bool

magic_firewall

EntitlementType
magic_firewall.pcaps_allowed bool

magic_wan_connector

EntitlementType
magic_wan_connector.enabled bool

managed_hostname

EntitlementType
managed_hostname.apex_proxying_access bool
managed_hostname.certificates_account max_count
managed_hostname.custom_origin_server_access bool
managed_hostname.custom_origin_sni_access bool
managed_hostname.enabled bool
managed_hostname.metadata_access bool

notifications

EntitlementType
notifications.webhooks_enabled bool

pages

EntitlementType
pages.build_cache_retention_limit_days max_count
pages.build_cache_storage_limit_mb max_count
pages.concurrent_builds max_count
pages.custom_domains_per_project max_count

proxy_anything

EntitlementType
proxy_anything.enabled bool

query_cache

EntitlementType
query_cache.enabled bool

queues

EntitlementType
queues.enabled bool
queues.max_queues max_count
queues.max_retention_hours max_count

quota

EntitlementType
quota.advanced_certificate_manager max_count

r2

EntitlementType
r2.enabled bool

rate_limiting

EntitlementType
rate_limiting.enabled bool
rate_limiting.log_ref bool
rate_limiting.nat_enabled bool

rulesets

EntitlementType
rulesets.adv_geoip_allowed bool
rulesets.adv_threat_intel_allowed bool
rulesets.block_customized_response_allowed bool
rulesets.body_inspection_allowed bool
rulesets.bots_management_allowed bool
rulesets.ddos_l4_sensitivity_limit max_count
rulesets.ddos_l7_expressions_allowed bool
rulesets.ddos_l7_sensitivity_limit max_count
rulesets.edge_rules max_count
rulesets.exposed_credentials_check_allowed bool
rulesets.firewall_custom_max_rules_per_ruleset max_count
rulesets.firewall_custom_phase_allowed bool
rulesets.fw_global_rulesets_execute_ddos_l4_allowed bool
rulesets.fw_global_rulesets_execute_ddos_l7_allowed bool
rulesets.fw_global_rulesets_execute_firewall_managed_ceccr_allowed bool
rulesets.fw_global_rulesets_execute_firewall_managed_cmr_allowed bool
rulesets.fw_global_rulesets_execute_firewall_managed_cor_allowed bool
rulesets.fw_global_rulesets_execute_magic_transit_ids_managed_allowed bool
rulesets.fw_global_rulesets_execute_magic_transit_managed_allowed bool
rulesets.hmac_function_allowed bool
rulesets.log_action_allowed bool
rulesets.magic_transit_allowed bool
rulesets.magic_transit_cf_lists_allowed bool
rulesets.magic_transit_max_ip_lists max_count
rulesets.magic_transit_protocols_allowed bool
rulesets.managed_lists_open_proxies_allowed bool
rulesets.matched_data_logging_allowed bool
rulesets.max_ddos_l4_rules max_count
rulesets.max_ddos_l7_rules max_count
rulesets.max_magic_transit_rules_per_ruleset max_count
rulesets.max_owned_custom_rulesets max_count
rulesets.max_ratelimit_rules_per_ruleset max_count
rulesets.max_rules_per_ruleset max_count
rulesets.max_versions_per_custom_ruleset max_count
rulesets.migration_firewall_custom_phase_allowed bool
rulesets.owning_root_rulesets_allowed bool
rulesets.ratelimit_level max_count
rulesets.ratelimit_sampling_period enum_number
rulesets.regex_operator_allowed bool
rulesets.select_configuration_phase_allowed bool

saa

EntitlementType
saa.allow_auto_accept_invites bool

secondary

EntitlementType
graphql_api.enabled_lb bool
secondary.create_zone bool

secondary_dns

EntitlementType
secondary_dns.zones max_count

snippets

EntitlementType
snippets.snippets_enabled bool

staging_certificates

EntitlementType
staging_certificates bool

stream

EntitlementType
images.enabled bool
images.storage max_count
images.transformations_enabled bool
stream.enabled bool
stream.video_storage_capacity max_count

subscriptions

EntitlementType
subscriptions.rate_plans.access_free bool
subscriptions.rate_plans.argo_free bool
subscriptions.rate_plans.cf_biz_emp bool
subscriptions.rate_plans.load_balancing_free bool
subscriptions.rate_plans.partners_access_basic bool
subscriptions.rate_plans.partners_access_ent bool
subscriptions.rate_plans.partners_access_premium bool
subscriptions.rate_plans.partners_argo bool
subscriptions.rate_plans.partners_biz bool
subscriptions.rate_plans.partners_ent bool
subscriptions.rate_plans.partners_free bool
subscriptions.rate_plans.partners_load_balancing bool
subscriptions.rate_plans.partners_load_balancing_ent bool
subscriptions.rate_plans.partners_pro bool
subscriptions.rate_plans.partners_rate_limiting bool
subscriptions.rate_plans.partners_spectrum bool
subscriptions.rate_plans.partners_stream_basic bool
subscriptions.rate_plans.partners_stream_ent bool
subscriptions.rate_plans.partners_workers_basic bool
subscriptions.rate_plans.partners_workers_ent bool
subscriptions.rate_plans.partners_workers_ss bool
subscriptions.rate_plans.rate_limiting_free bool
subscriptions.rate_plans.stream_free bool
subscriptions.rate_plans.web3_free bool
subscriptions.rate_plans.workers_free bool

vector_db

EntitlementType
vector_db.enabled bool

web3

EntitlementType
web3_ethereum.enabled bool
web3_ethereum.hostnames max_count
web3_ethereum.layer_2 bool
web3_ipfs_universal_path.enabled bool
web3_ipfs_universal_path.hostnames max_count
web3_ipfs.enabled bool
web3_ipfs.hostnames max_count
web3_polygon.enabled bool
web3_polygon.hostnames max_count

workers

EntitlementType
workers.enabled bool
workers.multiscript_enabled bool
workers.unbound_allowed bool

zaraz

EntitlementType
zaraz.enabled bool

zone

EntitlementType
zone.advanced_certificate_manager bool
zone.advanced_certificate_manager_quota_override max_count
zone.cname_setup_allowed bool
zone.partial_setup_allowed bool

Have an entitlement not covered on the list? Reach out to @CherryJimbo on Twitter or CherryJimbo#0001 on Discord.