← Fundamentals / fundamentals

Organizations

An Organization is a top-level container in Cloudflare for managing multiple accounts. It allows administrators to govern accounts, members, and resources from a single location rather than managing each account individually. Organization Super Administrators have implicit access to all accounts within the Organization. This means they do not need explicit membership on each account.

Organizations is available to Enterprise customers of any size and MSSP/Distributor partners who manage multiple Cloudflare accounts. Whether you have 5 accounts or 500, Organizations helps you manage them from one dashboard.

Organizations supports two customer types, each with a different structure:

• Enterprise Organizations: A single-tier structure for businesses managing their own accounts. One Organization contains multiple accounts directly.
• MSSP/Distributor Organizations: A multi-tier structure for channel partners and managed security service providers (MSSPs). A Distributor Organization contains child MSSP Organizations, each managing their own customer accounts.

Organization type is set at creation and cannot be changed.

Organization
├── Account 1
│   ├── Zone A
│   └── Zone B
├── Account 2
│   ├── Zone C
│   └── Zone D
└── Account 3
    └── Zone E

Distributor Organization
├── MSSP Organization A
│   ├── Sub-Organization A1
│   │   ├── Customer Account 1
│   │   │   ├── Zone A
│   │   │   └── Zone B
│   │   └── Customer Account 2
│   │       └── Zone C
│   └── Customer Account 3
│       └── Zone D
└── MSSP Organization B
    ├── Customer Account 4
    │   └── Zone E
    └── Customer Account 5
        └── Zone F

MSSP/Distributor Organizations support up to 5 levels of nested sub-organizations.

• Centralized account management: Manage all accounts from a single dashboard.
• Implicit access: Organization Super Administrators can access any account in the Organization without requiring explicit per-account membership.
• Aggregate analytics: View, filter, and download aggregate HTTP analytics across all Organization child accounts.
• Organization-level membership: Invite members to the Organization once, granting them access to all child accounts.
• WAF and Gateway policy sharing: Create security policies once and share them across accounts in your Organization.
• IdP federation: Share a single identity provider configuration across all accounts in your Organization. Refer to IdP federation for setup details.
• API, SDK, and Terraform support: Manage Organizations programmatically with the Cloudflare Organizations API, SDKs, or Terraform provider. User API Tokens support some Organization operations, but they cannot complete the full Terraform resource lifecycle. Refer to API authentication.
• Enhanced account switcher: Navigate between accounts with an Organization-aware account switcher in the dashboard.

For a full list of features and limitations specific to each Organization type, refer to the Enterprise or MSSP/Distributor guide.

• Organizations for Enterprise
• Organizations for MSSP and Distributors
• Policy sharing
• Limitations and troubleshooting
• Set up
• Manage members
• Manage organizations