Any attempt to add/edit access policies (e.g. at https://dash.teams.cloudflare.com/.../access/apps/rules fails with:
Error configuring your application: access.api.error.invalid_request: domain is a required field
The single existing policy was auto-created after toggling access on for a Pages site.