Not entitled to use the phase http_request_firewall_custom

[jeagertester2]

I got error message “not entitled to use the phase http_request_firewall_custom” when i create new custom ruleset via API.

curl:

curl --location 'https://api.cloudflare.com/client/v4/accounts/{account id}/rulesets' \
--header 'Authorization: Bearer {api token}' \
--header 'Content-Type: application/json' \
--data '{
  "name": "Custom Ruleset 1",
  "description": "My First Custom Ruleset",
  "kind": "custom",
  "phase": "http_request_firewall_custom"
}'

response:

{
    "result": null,
    "success": false,
    "errors": [
        {
            "code": 50002,
            "message": "not entitled to use the phase http_request_firewall_custom",
            "source": {
                "pointer": ""
            }
        }
    ],
    "messages": null
}

[sdayman]

Does your dashboard’s Security settings for WAF show Custom Rules? Or is it Firewall Rules?

[jeagertester2]

yes, my dashboard security settings WAF show custom rule

[user5342]

Hello @jeagertester2 ,
Did find a solution to your problem ?

[mrpe]

i have exactly the same issue.

[hollynghiem]

Hi there,

Based on your Curl Command, I can see that you are trying to create an Account WAF rule.

The reason you are having this error is that this feature Account WAF is only available on Enterprise plan. You must upgrade to Enterprise plan to use this feature.

Please note that:

• For Zone Level WAF Custom Rules, depends on your plan subscription, your zone is entitled to have some quantity Custom Rules.
• For Account Level WAF, this feature is available only on Enterprise plan.

You can read more at:

• Cloudflare pricing plan: Our Plans | Pricing
• Create WAF Zone Customs rules: Create custom rules via API · Cloudflare Web Application Firewall (WAF) docs

Thank you!