Which API key/token permission do I need to manage User API Tokens?

[user832]

For Workers & Pages, what is the name of the domain?

N/A

What is the error number?

9109

What is the error message?

Unauthorized to access requested resource

What is the issue or error you’re encountering

Unauthorized to access requested resource

What steps have you taken to resolve the issue?

I’ve tried to understand Cloudflare API Documentation but I’m confused which permissions are needed.

What are the steps to reproduce the issue?

Create a token under https://dash.cloudflare.com/profile/api-tokens to manage all resources.

Use it to get “User API Tokens” via either (base URL: https://api.cloudflare.com/)

• /client/v4/zones/:zone_id/access/service_tokens
• /client/v4/accounts/:account_id/access/service_tokens
• /client/v4/accounts/:account_id/tokens
• /client/v4/user/tokens

but none work.

What I want to achieve is to have an API key/token that can manage my API tokens at https://dash.cloudflare.com/profile/api-tokens

[user832]

Apparently it’s “User.API Tokens” from “Create Additional Tokens” template. So this is solved. I wonder how can I utilize service accounts (or account owned tokens) now but that’s a separate issue.