PDNS Secure Location Management New User Role

[NuelEdeh]

Summary

Changelog to update Gateway DNS Secure Locations Write Role

Screenshots (optional)

Documentation checklist

• The documentation style guide has been adhered to.
• If a larger change - such as adding a new page- an issue has been opened in relation to any incorrect or out of date information that this PR fixes.
• Files which have changed name or location have been allocated redirects.

[hyperlint-ai]

Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment.

We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally.

---

PR Change Summary

Introduced a new user role for managing secure DNS locations in Cloudflare Zero Trust.

• Added a new Cloudflare Zero Trust Secure DNS Locations Write role for government customers.
• Outlined security requirements for managing DNS locations, including mandatory BYO IP usage and source network filtering.
• Provided guidelines for role assignment and avoiding conflicts with broader permission roles.

Added Files

• src/content/changelog/gateway/2025-03-21-pdns-user-locations-role.mdx

---

How can I customize these reviews?

Check out the Hyperlint AI Reviewer docs for more information on how to customize the review.

If you just want to ignore it on this PR, you can add the hyperlint-ignore label to the PR. Future changes won't trigger a Hyperlint review.

Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add hyperlint-ignore to the PR to ignore the link check for this PR.

What is Hyperlint?

Hyperlint is an AI agent that helps you write, edit, and maintain your documentation.

Learn more about the Hyperlint AI reviewer and the checks that we can run on your documentation.

[NuelEdeh]

Updated this changelog to be more concise and clear.

[NuelEdeh]

@kennyj42 please see the new updates!

[NuelEdeh]

"Bring Your Own (BYO) IPv4/IPv6 Resolver Ranges" feels clunky.

Changed to: "Bring your own DNS resolver IP addresses"