--- title: Accounts --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/terraform) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Accounts #### resource cloudflare\_account ##### required Expand Collapse name: String Account name [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>) ##### optional Expand Collapse standalone?: Bool Set to `true` and omit `unit` to create a standalone Free Account. If provided, this field must be `true`. [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20standalone>)

unit?: Attributes Information related to the tenant unit. Provide its ID and omit standalone to create the Account within an Organization. See https://developers.cloudflare.com/tenant/how-to/manage-accounts/.

id?: String Tenant unit ID Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20unit>) type?: String [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20type>)

managed\_by?: Attributes Parent container details

parent\_org\_id: String ID of the parent Organization, if one exists Link to this property parent\_org\_name: String Name of the parent Organization, if one exists Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20managed_by>)

settings?: Attributes Account settings

abuse\_contact\_email?: String Sets an abuse contact email to notify for abuse reports. Link to this property enforce\_twofactor?: Bool Indicates whether membership in this account requires that Two-Factor Authentication is enabled Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20settings>) ##### computed Expand Collapse id: String Identifier [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) created\_on: Time Timestamp for the creation of the account [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_on>) ### cloudflare\_account Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_account" "example_account" { name = "name" standalone = true type = "standard" unit = { id = "f267e341f3dd4697bd3b9f71dd96247f" } } ``` #### data cloudflare\_account ##### optional Expand Collapse account\_id?: String Account identifier tag. [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)

filter?: Attributes

direction?: String Direction to order results. Link to this property name?: String Name of the account. Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>) ##### computed Expand Collapse id: String Account identifier tag. [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) created\_on: Time Timestamp for the creation of the account [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_on>) name: String Account name [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) type: String [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20type>)

managed\_by: Attributes Parent container details

parent\_org\_id: String ID of the parent Organization, if one exists Link to this property parent\_org\_name: String Name of the parent Organization, if one exists Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20managed_by>)

settings: Attributes Account settings

abuse\_contact\_email: String Sets an abuse contact email to notify for abuse reports. Link to this property enforce\_twofactor: Bool Indicates whether membership in this account requires that Two-Factor Authentication is enabled Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20settings>) ### cloudflare\_account Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account" "example_account" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" } ``` #### data cloudflare\_accounts ##### optional Expand Collapse direction?: String Direction to order results. [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>) name?: String Name of the account. [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20name>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String Identifier Link to this property name: String Account name Link to this property type: String Link to this property created\_on: Time Timestamp for the creation of the account Link to this property

managed\_by: Attributes Parent container details

parent\_org\_id: String ID of the parent Organization, if one exists Link to this property parent\_org\_name: String Name of the parent Organization, if one exists Link to this property

Link to this property

settings: Attributes Account settings

Link to this property

[Link to this property](<#(resource)%20accounts%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_accounts Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_accounts" "example_accounts" { direction = "desc" name = "example.com" } ``` #### AccountsMembers #### resource cloudflare\_account\_member ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) email: String The contact email address of the user. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20email>) ##### optional Expand Collapse status?: String Status of the member invitation. If not provided during creation, defaults to ‘pending’. Changing from ‘accepted’ back to ‘pending’ will trigger a replacement of the member resource in Terraform. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20status>) roles?: List\[String] Array of roles associated with this member. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20roles>)

policies?: List\[Attributes] Array of policies associated with this member.

id: String Policy identifier. Link to this property access: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the group. Link to this property

Link to this property

resource\_groups: List\[Attributes] A list of resource groups that the policy applies to.

id: String Identifier of the group. Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20policies>) ##### computed Expand Collapse id: String Membership identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)

user: Attributes Details of the user associated to the membership.

email: String The contact email address of the user. Link to this property id: String Identifier Link to this property first\_name: String User’s first name Link to this property last\_name: String User’s last name Link to this property two\_factor\_authentication\_enabled: Bool Indicates whether two-factor authentication is enabled for the user account. Does not apply to API authentication. Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20user>) ### cloudflare\_account\_member Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_account_member" "example_account_member" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" email = "user@example.com" roles = ["3536bcfad5faccb999b47003c79917fb"] status = "accepted" } ``` #### data cloudflare\_account\_member ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse member\_id?: String Membership identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20member_id>)

filter?: Attributes

direction?: String Direction to order results. Link to this property order?: String Field to order results by. Link to this property status?: String A member’s status in the account. Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>) ##### computed Expand Collapse id: String Membership identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) email: String The contact email address of the user. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20email>) status: String A member’s status in the account. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20status>)

policies: List\[Attributes] Access policy for the membership

id: String Policy identifier. Link to this property access: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the permission group. Link to this property

meta: Attributes Attributes associated to the permission group.

category: String A category used to group permission groups. Link to this property deprecated: String Indicates whether the permission group is deprecated. Link to this property description: String Additional information about the permission group. Link to this property editable: String Indicates whether the permission group can be edited. Link to this property eol\_at: Time The planned end-of-life date and time, when provided. Link to this property label: String A label identifying the permission group. Link to this property scopes: String The scope associated with the permission group. Link to this property visibility: String Indicates the permission group’s availability or visibility. Link to this property

Link to this property name: String Name of the permission group. Link to this property

Link to this property

resource\_groups: List\[Attributes] A list of resource groups that the policy applies to.

id: String Identifier of the resource group. Link to this property

scope: Attributes A scope is a combination of scope objects which provides additional context.

key: String This is a combination of pre-defined resource name and identifier (like Account ID etc.) Link to this property

objects: List\[Attributes] A list of scope objects for additional context.

key: String This is a combination of pre-defined resource name and identifier (like Zone ID etc.) Link to this property

Link to this property

meta: Attributes Attributes associated to the resource group.

key: String Link to this property value: String Link to this property

Link to this property name: String Name of the resource group. Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policies>)

roles: List\[Attributes] Roles assigned to this Member.

id: String Role identifier tag. Link to this property description: String Description of role’s permissions. Link to this property name: String Role name. Link to this property

permissions: Attributes

analytics: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

billing: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

cache\_purge: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns\_records: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

lb: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

logs: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

organization: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

ssl: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

waf: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zone\_settings: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zones: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20roles>)

user: Attributes Details of the user associated to the membership.

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20user>) ### cloudflare\_account\_member Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_member" "example_account_member" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" member_id = "4536bcfad5faccb111b47003c79917fa" } ``` #### data cloudflare\_account\_members ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse direction?: String Direction to order results. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>) order?: String Field to order results by. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>) status?: String A member’s status in the account. [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20status>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String Membership identifier tag. Link to this property email: String The contact email address of the user. Link to this property

policies: List\[Attributes] Access policy for the membership

id: String Policy identifier. Link to this property access: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the permission group. Link to this property

meta: Attributes Attributes associated to the permission group.

Link to this property name: String Name of the permission group. Link to this property

Link to this property

resource\_groups: List\[Attributes] A list of resource groups that the policy applies to.

id: String Identifier of the resource group. Link to this property

scope: Attributes A scope is a combination of scope objects which provides additional context.

key: String This is a combination of pre-defined resource name and identifier (like Account ID etc.) Link to this property

objects: List\[Attributes] A list of scope objects for additional context.

key: String This is a combination of pre-defined resource name and identifier (like Zone ID etc.) Link to this property

Link to this property

meta: Attributes Attributes associated to the resource group.

key: String Link to this property value: String Link to this property

Link to this property name: String Name of the resource group. Link to this property

Link to this property

roles: List\[Attributes] Roles assigned to this Member.

id: String Role identifier tag. Link to this property description: String Description of role’s permissions. Link to this property name: String Role name. Link to this property

permissions: Attributes

analytics: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

billing: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

cache\_purge: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns\_records: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

lb: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

logs: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

organization: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

ssl: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

waf: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zone\_settings: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zones: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

Link to this property status: String A member’s status in the account. Link to this property

user: Attributes Details of the user associated to the membership.

Link to this property

[Link to this property](<#(resource)%20accounts.members%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_account\_members Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_members" "example_account_members" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" direction = "desc" order = "status" status = "accepted" } ``` #### AccountsRoles #### data cloudflare\_account\_role ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) role\_id: String Role identifier tag. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20role_id>) ##### computed Expand Collapse description: String Description of role’s permissions. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>) id: String Role identifier tag. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) name: String Role name. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)

permissions: Attributes

analytics: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

billing: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

cache\_purge: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns\_records: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

lb: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

logs: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

organization: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

ssl: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

waf: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zone\_settings: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zones: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20permissions>) ### cloudflare\_account\_role Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_role" "example_account_role" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" role_id = "3536bcfad5faccb999b47003c79917fb" } ``` #### data cloudflare\_account\_roles ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String Role identifier tag. Link to this property description: String Description of role’s permissions. Link to this property name: String Role name. Link to this property

permissions: Attributes

analytics: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

billing: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

cache\_purge: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

dns\_records: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

lb: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

logs: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

organization: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

ssl: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

waf: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zone\_settings: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

zones: Attributes

read: Bool Link to this property write: Bool Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.roles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_account\_roles Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_roles" "example_account_roles" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" } ``` #### AccountsSubscriptions #### resource cloudflare\_account\_subscription ##### optional Expand Collapse account\_id?: String The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) zone\_id?: String The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>) frequency?: String How often the subscription is renewed automatically. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20frequency>)

rate\_plan?: Attributes The rate plan applied to the subscription.

id?: String The ID of the rate plan. Link to this property currency?: String The currency applied to the rate plan subscription. Link to this property externally\_managed?: Bool Whether this rate plan is managed externally from Cloudflare. Link to this property is\_contract?: Bool Whether a rate plan is enterprise-based (or newly adopted term contract). Link to this property public\_name?: String The full name of the rate plan. Link to this property scope?: String The scope that this rate plan applies to. Link to this property sets?: List\[String] The list of sets this rate plan applies to. Returns array of strings. Link to this property

[Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20rate_plan>) ##### computed Expand Collapse id: String Subscription identifier tag. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) currency: String The monetary unit in which pricing information is displayed. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20currency>) current\_period\_end: Time The end of the current period and also when the next billing is due. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20current_period_end>) current\_period\_start: Time When the current billing period started. May match initial\_period\_start if this is the first period. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20current_period_start>) price: Float64 The price of the subscription that will be billed, in US dollars. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20price>) state: String The state that the subscription is in. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20state>) ### cloudflare\_account\_subscription Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_account_subscription" "example_account_subscription" { zone_id = "zone_id" frequency = "monthly" rate_plan = { id = "free" currency = "USD" externally_managed = false is_contract = false public_name = "Business Plan" scope = "zone" sets = ["string"] } } ``` #### data cloudflare\_account\_subscription ##### optional Expand Collapse zone\_id?: String The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>) account\_id?: String The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) currency: String The monetary unit in which pricing information is displayed. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20currency>) current\_period\_end: Time The end of the current period and also when the next billing is due. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20current_period_end>) current\_period\_start: Time When the current billing period started. May match initial\_period\_start if this is the first period. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20current_period_start>) frequency: String How often the subscription is renewed automatically. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20frequency>) price: Float64 The price of the subscription that will be billed, in US dollars. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20price>) state: String The state that the subscription is in. [Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20state>)

rate\_plan: Attributes The rate plan applied to the subscription.

id: String The ID of the rate plan. Link to this property currency: String The currency applied to the rate plan subscription. Link to this property externally\_managed: Bool Whether this rate plan is managed externally from Cloudflare. Link to this property is\_contract: Bool Whether a rate plan is enterprise-based (or newly adopted term contract). Link to this property public\_name: String The full name of the rate plan. Link to this property scope: String The scope that this rate plan applies to. Link to this property sets: List\[String] The list of sets this rate plan applies to. Returns array of strings. Link to this property

[Link to this property](<#(resource)%20accounts.subscriptions%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20rate_plan>) ### cloudflare\_account\_subscription Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_subscription" "example_account_subscription" { account_id = "account_id" zone_id = "zone_id" } ``` #### AccountsTokens #### resource cloudflare\_account\_token ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) name: String Token name. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)

policies: List\[Attributes] List of access policies assigned to the token.

id: String Policy identifier. Link to this property effect: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the permission group. Link to this property

meta?: Attributes Attributes associated to the permission group.

category?: String A category used to group permission groups. Link to this property deprecated?: String Indicates whether the permission group is deprecated. Link to this property description?: String Additional information about the permission group. Link to this property editable?: String Indicates whether the permission group can be edited. Link to this property eol\_at?: Time The planned end-of-life date and time, when provided. Link to this property label?: String A label identifying the permission group. Link to this property scopes?: String The scope associated with the permission group. Link to this property visibility?: String Indicates the permission group’s availability or visibility. Link to this property

Link to this property name: String Name of the permission group. Link to this property

Link to this property resources: Map\[String] A list of resource names that the policy applies to. Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20policies>) ##### optional Expand Collapse expires\_on?: Time The expiration time on or after which the JWT MUST NOT be accepted for processing. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20expires_on>) not\_before?: Time The time before which the token MUST NOT be accepted for processing. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20not_before>)

condition?: Attributes

request\_ip?: Attributes Client IP restrictions.

in?: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property not\_in?: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20condition>) status?: String Status of the token. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20status>) ##### computed Expand Collapse id: String Token identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) creator\_email\_at\_creation: String The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20creator_email_at_creation>) issued\_on: Time The time on which the token was created. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20issued_on>) last\_used\_on: Time Last time the token was used. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_used_on>) modified\_on: Time Last time the token was modified. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_on>) provisioner\_id: String The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when `provisioner_type` is present and null when the identifier is unavailable. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20provisioner_id>) provisioner\_type: String The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20provisioner_type>) value: String The token value. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20value>) ### cloudflare\_account\_token Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_account_token" "example_account_token" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" name = "readonly token" policies = [{ effect = "allow" permission_groups = [{ id = "c8fed203ed3043cba015a93ad1616f1f" meta = { category = "category" deprecated = "deprecated" description = "description" editable = "editable" eol_at = "2019-12-27T18:11:19.117Z" label = "load_balancer_admin" scopes = "com.cloudflare.api.account" visibility = "visibility" } }, { id = "82e64a83756745bbbb1c9c2701bf816b" meta = { category = "category" deprecated = "deprecated" description = "description" editable = "editable" eol_at = "2019-12-27T18:11:19.117Z" label = "fbm_user" scopes = "com.cloudflare.api.account" visibility = "visibility" } }] resources = { "com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43" = "*" } }] condition = { request_ip = { in = ["123.123.123.0/24", "2606:4700::/32"] not_in = ["123.123.123.100/24", "2606:4700:4700::/48"] } } expires_on = "2020-01-01T00:00:00Z" not_before = "2018-07-01T05:20:00Z" } ``` #### data cloudflare\_account\_token ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse token\_id?: String Token identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20token_id>)

filter?: Attributes

direction?: String Direction to order results. Link to this property include\_expired?: Bool When true, includes recently-expired tokens in the response. Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>) ##### computed Expand Collapse id: String Token identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) creator\_email\_at\_creation: String The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20creator_email_at_creation>) expires\_on: Time The expiration time on or after which the JWT MUST NOT be accepted for processing. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20expires_on>) issued\_on: Time The time on which the token was created. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20issued_on>) last\_used\_on: Time Last time the token was used. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_used_on>) modified\_on: Time Last time the token was modified. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_on>) name: String Token name. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) not\_before: Time The time before which the token MUST NOT be accepted for processing. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20not_before>) provisioner\_id: String The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when `provisioner_type` is present and null when the identifier is unavailable. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20provisioner_id>) provisioner\_type: String The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20provisioner_type>) status: String Status of the token. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20status>)

condition: Attributes

request\_ip: Attributes Client IP restrictions.

in: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property not\_in: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property

Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20condition>)

policies: List\[Attributes] List of access policies assigned to the token.

id: String Policy identifier. Link to this property effect: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the permission group. Link to this property

meta: Attributes Attributes associated to the permission group.

Link to this property name: String Name of the permission group. Link to this property

Link to this property resources: Map\[String] A list of resource names that the policy applies to. Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policies>) ### cloudflare\_account\_token Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_token" "example_account_token" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" token_id = "ed17574386854bf78a67040be0a770b0" } ``` #### data cloudflare\_account\_tokens ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse direction?: String Direction to order results. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>) include\_expired?: Bool When true, includes recently-expired tokens in the response. [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20include_expired>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String Token identifier tag. Link to this property

condition: Attributes

request\_ip: Attributes Client IP restrictions.

in: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property not\_in: List\[String] List of IPv4/IPv6 CIDR addresses. Link to this property

Link to this property

Link to this property creator\_email\_at\_creation: String The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available. Link to this property expires\_on: Time The expiration time on or after which the JWT MUST NOT be accepted for processing. Link to this property issued\_on: Time The time on which the token was created. Link to this property last\_used\_on: Time Last time the token was used. Link to this property modified\_on: Time Last time the token was modified. Link to this property name: String Token name. Link to this property not\_before: Time The time before which the token MUST NOT be accepted for processing. Link to this property

policies: List\[Attributes] List of access policies assigned to the token.

id: String Policy identifier. Link to this property effect: String Allow or deny operations against the resources. Link to this property

permission\_groups: List\[Attributes] A set of permission groups that are specified to the policy.

id: String Identifier of the permission group. Link to this property

meta: Attributes Attributes associated to the permission group.

Link to this property name: String Name of the permission group. Link to this property

Link to this property resources: Map\[String] A list of resource names that the policy applies to. Link to this property

Link to this property provisioner\_id: String The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when provisioner_type is present and null when the identifier is unavailable. Link to this property provisioner\_type: String The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens. Link to this property status: String Status of the token. Link to this property

[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_account\_tokens Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_tokens" "example_account_tokens" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" direction = "desc" } ``` #### AccountsTokensPermission Groups #### data cloudflare\_account\_api\_token\_permission\_groups ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse name?: String Filter by the name of the permission group. The value must be URL-encoded. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) scope?: String Filter by the scope of the permission group. The value must be URL-encoded. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20scope>) ##### computed Expand Collapse

permission\_groups: List\[Attributes]

id: String Public ID. Link to this property category: String Product category that this permission group belongs to. Link to this property is\_selectable: Bool Whether the caller can select this permission group when creating a token. Link to this property name: String Permission Group Name Link to this property scopes: List\[String] Resources to which the Permission Group is scoped Link to this property

[Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20permission_groups>) ### cloudflare\_account\_api\_token\_permission\_groups Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_api_token_permission_groups" "example_account_api_token_permission_groups" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" name = "Account%20Settings%20Write" scope = "com.cloudflare.api.account.zone" } ``` #### data cloudflare\_account\_api\_token\_permission\_groups\_list ##### required Expand Collapse account\_id: String Account identifier tag. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse name?: String Filter by the name of the permission group. The value must be URL-encoded. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20name>) scope?: String Filter by the scope of the permission group. The value must be URL-encoded. [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20scope>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

[Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_account\_api\_token\_permission\_groups\_list Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_account_api_token_permission_groups_list" "example_account_api_token_permission_groups_list" { account_id = "023e105f4ecef8ad9ca31a8372d0c353" name = "Account%20Settings%20Write" scope = "com.cloudflare.api.account.zone" } ```