IamUserGroup

Source: src/Cloudflare/Iam/UserGroup.ts

A Cloudflare IAM user group — a named set of account members that share fine-grained policies (permission groups scoped to resource groups).

Both name and policies are mutable in place; updating policies replaces the full set. Add members with {@link IamUserGroupMembership}.

Account-scoped IAM (resource groups, user groups) is an Enterprise feature.

Creating a User Group

Empty group

const group = yield* Cloudflare.IamUserGroup("Operators", {});

Group with a policy

const readers = yield* Cloudflare.IamUserGroup("Readers", {
  name: "zone-readers",
  policies: [
    {
      access: "allow",
      permissionGroups: [readOnlyPermissionGroupId],
      resourceGroups: [resourceGroup.resourceGroupId],
    },
  ],
});

Managing Members

yield* Cloudflare.IamUserGroupMembership("SamInReaders", {
  userGroup: readers.userGroupId,
  memberId: accountMember.memberId,
});