---
title: Enable Magic user roles · Cloudflare One docs
description: You can determine which users have, or do not have, configuration
  edit access for Magic products.
lastUpdated: 2025-11-04T17:07:51.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/configuration/common-settings/enable-magic-roles/
  md: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/configuration/common-settings/enable-magic-roles/index.md
---

You can determine which users have, or do not have, configuration edit access for Magic products, including Magic Transit, Magic WAN, and Magic Firewall.

For example, if you have multiple Cloudflare products managed by different teams on the same account, you may want to provide select users with edit access and other users with read-only access.

## Assign permissions

1. In the Cloudflare dashboard, go to the **Members** page.

   [Go to **Members**](https://dash.cloudflare.com/?to=/:account/members)

2. Under **Members**, enter an existing user's name and select **Search**.

3. Expand the menu at the end of the user row.

4. From the list, locate **Network Services (Magic)**.

5. Select one of two options:

   * **Network Services (Magic)** - Enables users to view and edit Magic configurations.
   * **Network Services (Magic, Read-Only)** - Enables users to view but not modify Magic configurations.
