Which permission(s) are needed to list zone rulesets in a given phase

[gonzalo.bermudez]

I’m using terraform to manage Cloudflare. For some time now, using an API token to plan an execution fails at an early stage, for lack of permissions.

I tried using the “Read all resources” token template with no luck. The same task works using my global API key.

The error message reads missing the permissions required to list zone rulesets in the http_request_late_transform_managed phase
I can’t find any documentation on this regard in Cloudflare’s api docs.

Thanks for any help!

[gonzalo.bermudez]

Replying to myself, in case this is useful for anyone else. It’s kind of confusing, but adding write permissions on Zone Transform Rules and Managed headers did the trick.