PermissionGroups

Lists all Cloudflare API permission groups available for an account. Used primarily when creating API tokens for Cloudflare services like R2.

Minimal Example

Get all permission groups including those for R2:

import { PermissionGroups } from "alchemy/cloudflare";

const permissions = await PermissionGroups("cloudflare-permissions");

Create API Token with Permissions

Use with AccountApiToken to create a token with proper permissions:

import { PermissionGroups, AccountApiToken } from "alchemy/cloudflare";

const permissions = await PermissionGroups("cloudflare-permissions");

const token = await AccountApiToken("r2-token", {
  name: "R2 Read-Only Token",
  policies: [{
    effect: "allow", 
    resources: {
      "com.cloudflare.edge.r2.bucket.abc123_default_my-bucket": "*"
    },
    permissionGroups: [{
      id: permissions["Workers R2 Storage Bucket Item Read"].id
    }]
  }]
});