Ann Ming Samborski

This commit introduces **new granular API token permissions** for the **Cloudflare Access** module, enhancing security and control over API operations. Specifically, it adds capabilities for managing permissions related to **Organizations Revoke** and **Populations**, allowing for more precise control over API token access. This **feature enhancement** provides administrators with finer-grained control over API token privileges, thereby improving security and compliance. A new changelog entry, `src/content/changelog/access/2026-01-22-granular-api-token-permissions.mdx`, documents these three new permissions.

This commit provides **documentation** and **changelog updates** for the new "Require Access protection for zones" feature, which introduces a **zone-level deny-by-default security setting** within the **Cloudflare Access** product. A new changelog entry (`src/content/changelog/access/2026-01-22-deny-by-default-for-zones.mdx`) announces this capability with a screenshot and operational details. Concurrently, a dedicated documentation page (`src/content/docs/cloudflare-one/access-controls/access-settings/require-access-protection.mdx`) was created to guide users on how to enable, manage, and configure traffic allowances for this enhanced protection. This **maintenance** work ensures users are fully informed about and can effectively utilize this significant security control.

This commit **updates documentation** and adds a **changelog entry** to announce support for exporting logs from **MCP server portals** using the **Logpush** service. It modifies `src/content/docs/cloudflare-one/access-controls/ai-controls/mcp-portals.mdx` and `src/content/docs/cloudflare-one/insights/logs/logpush.mdx` to reflect this new capability. This **enhances observability** for users by allowing them to integrate MCP portal logs into their existing log management solutions via Logpush. The work is primarily **documentation** to inform users about a **new capability** within the **Cloudflare Access** and **Logpush** ecosystems.

This commit **updates the product changelog documentation** to reflect recent changes in **Access advanced authentication**. It introduces a new changelog entry (`src/content/changelog/fundamentals/2026-02-13-access-policy-service-token-permissions.mdx`) detailing **fine-grained permissions for Access policies and service tokens**. Additionally, an earlier changelog entry (`src/content/changelog/fundamentals/2025-10-01-fine-grained-permissioning-beta.mdx`) is updated to explicitly list **Access** as an affected product. This **documentation maintenance** ensures users are accurately informed about new capabilities and product scope within the **Access** system.

This commit introduces **browser-based RDP clipboard controls**, a **new capability** that allows administrators to manage clipboard access within RDP sessions accessed through a browser. This feature enhances security and control for **Cloudflare One RDP access**, enabling more granular policy enforcement. The change includes comprehensive **documentation updates** in `rdp-browser.mdx` to detail configuration options and in `policies/index.mdx` to explain how "Connection context" applies to these controls. This significantly impacts the administrative capabilities and user experience for browser-based RDP by providing configurable clipboard functionality.

This commit provides a **documentation update** for **Cloudflare Access**, specifically within its changelog. It adds a new entry to `src/content/changelog/access/2026-01-08-Access-audit-log-for-DoH-users.mdx` to announce a **feature enhancement**: Cloudflare admin activity logs now capture the creation of **DNS over HTTP (DoH) users**. This **maintenance work** ensures administrators are informed about the expanded auditability and visibility into DoH user management activities. The update also includes minor fixes to the changelog entry's formatting and API links for clarity.

This commit introduces a **new capability** for **Cloudflare Access** users, enabling them to **generate SSH Certificate Authorities (CAs) directly from the Cloudflare dashboard**. This **enhancement** streamlines the management of SSH CAs by providing a convenient, integrated user interface option within the **Cloudflare dashboard**'s Access section. The change improves the user experience for configuring SSH access, making the process more intuitive. A new changelog entry (`2025-11-14-SSH-CA-enhancements.mdx`) documents this feature, ensuring users are informed of the improved workflow.

This commit introduces a **new changelog entry** announcing the **General Availability (GA) of browser-based RDP** within the **Access product documentation**. Concurrently, it performs a **documentation maintenance** task by updating several existing changelog entries in the `src/content/changelog/access/` directory to correctly assign them the 'access' product tag. This ensures that users are informed about the latest **Access product capabilities** and that all relevant changelog entries are properly categorized for improved discoverability. The changes enhance the overall organization and completeness of the **Access changelog**.

This commit **updates the documentation** for **Cloudflare One's browser-based RDP connections** to clarify a specific functional constraint. It adds a new **limitation** within the `rdp-browser.mdx` file, informing users that printing to local printers is not supported from these sessions. This **documentation enhancement** improves user understanding and sets appropriate expectations for those utilizing the **RDP feature** through Cloudflare One.

This commit **introduces a new changelog entry** in `src/content/changelog/access/2025-08-15-sftp.mdx`, announcing the **release of SFTP support for SSH** within **Cloudflare Access for Infrastructure**. This **documentation update** informs users about a significant **new capability**, enabling secure SFTP file transfers when utilizing Cloudflare Access for their infrastructure. The entry details how users can now leverage SFTP alongside existing SSH functionality, enhancing the platform's utility for infrastructure management.

This commit **enhances** the **Cloudflare One SSH infrastructure access** by **removing previous limitations on SFTP and SCP file transfer capabilities** for short-lived SSH connections. It updates the documentation for `src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx` to accurately reflect this expanded functionality. Specifically, the documentation now indicates full support for `sftp` commands and no longer lists `sftp` and `scp` as unsupported features. This **capability update** allows users to leverage these secure file transfer protocols, improving the overall utility and flexibility of the SSH access feature.

This commit introduces a **new capability** for **Data Loss Prevention (DLP)** by adding a **changelog entry** for the "Document Matching" detection type. It specifically documents the availability of this new feature, allowing users to leverage advanced content matching for sensitive data. The change ensures that the project's **DLP module** is properly updated with release information, informing users about the enhanced detection capabilities.

This commit **updates the documentation** for **browser-based RDP connections** within the Cloudflare One platform, specifically in `rdp-browser.mdx`. This **documentation update** provides crucial **clarifications** and **updated requirements** for users. It addresses the necessary **Powershell version**, the correct format for **Microsoft Entra ID-bound usernames**, and the **size limits for copy/paste operations**. Furthermore, it adds guidance on understanding **virtual networks** and obtaining their IDs, significantly enhancing the user experience for RDP setup and troubleshooting.

This commit **updates the documentation** by adding two new entries to the changelog for the Access product. It announces the release of **SSH with Access for Infrastructure**, providing enhanced secure access capabilities for internal resources. Additionally, it details the new **Logpush support for SSH command logs**, allowing users to export and analyze SSH session data for auditing and compliance. This **documentation update** ensures users are informed about significant new features within the Access and Logpush services.

This commit **announces the open beta of browser-based RDP** for all Cloudflare customers within the **Cloudflare Access** product. It primarily involves a **documentation update**, adding a new entry to the changelog at `src/content/changelog/access/2025-07-01-browser-based-rdp-open-beta.mdx`. This marks a **new capability** becoming available, allowing users to leverage RDP directly through their browser, enhancing the accessibility and functionality of Cloudflare Access. The changelog entry was refined during review to ensure accurate copy and correct links, making this a significant **feature announcement** for the platform.

This commit provides a **documentation update** for the **RDP browser feature**, specifically within the `rdp-browser.mdx` file. The update incorporates new information pertaining to a **beta rollout** of this functionality. This **maintenance update** ensures that users accessing the documentation will find the most current and accurate details regarding the RDP browser's availability and status.

This commit **updates the documentation** for **Cloudflare One Access account limits**, specifically increasing the listed maximum for **Infrastructure targets** from 300 to 5,000. This **documentation update** in `src/content/docs/cloudflare-one/account-limits.mdx` reflects an expanded system capability. The change ensures users are aware of the new, higher capacity, enabling them to plan for larger deployments and leverage the full potential of the Cloudflare One platform.

This commit provides significant **documentation updates** for **Cloudflare One's SSH Infrastructure Access** and **Access logs**. It clarifies **Logpush support for exporting SSH command logs**, details **new fields in Access logs** related to infrastructure targets, and explains **`scp` support limitations with OpenSSH 9.0+**. This **documentation update** improves user understanding of logging capabilities and compatibility for **SSH infrastructure access**, ensuring the guides are aligned with current features and best practices. The changes affect `src/content/docs/cloudflare-one/applications/non-http/index.mdx`, `src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx`, and `src/content/docs/cloudflare-one/insights/logs/audit-logs.mdx`.