DDNS for subdomains

I need to create an API Token to allow updating of the IP for a subdomain (A record) of one of my domains. I get the error below unless I grant access to ‘All Zones’

Actor ‘com.cloudflare.api.token.******************’ requires permission ‘com.cloudflare.api.account.zone.list’ to list zones

Hey there,

If the scope looks good, what permissions did you set for this particular API token?