How does it work together

I want to host something with Cloudflare tunnels but I not in to the public, but I want to my team to assess it.

It might be a simple answer, but I don’t get how the Cloudflare zero trust goes together.

Thanks for helping