Unable to determine zone_id

[brian.orpin]

I am suddenly getting this error when trying to renew a certificate - it has worked before. I am using the LE add-on in Home Assistant.

second part of error is

Please confirm that the domain name has been entered correctly and is already associated with the supplied Cloudflare account.

Using an API Token, renewing a subdomain certificate by a dns-01 challenge. The API token has edit permissions on the domain zone. I have logged into the account and edited the token to all zones (which has not helped).

Suggestions as to how to debug this?

[edit]

requires permission ‘com.cloudflare.api.account.zone.list’ to list zones

I used the 'edit zones template` for the token - is that wrong?

[brian.orpin]

Having tried every possible combination it seems, the following allows the renewal.

And allowing all zones.