# Use Cloudflare SSO to assign Users to SlapFive Roles

## Configure Cloudflare Access Policies and SlapFive Roles

To have Cloudflare assign each User to a specific SlapFive Role, you need to set up your SlapFive Roles with names that exactly match each Cloudflare Access Group used for accessing SlapFive.

* [ ] Determine the Cloudflare Access Groups you'll use and make sure each User who you want to have access to SlapFive belongs to one of those Access Groups. If you want dedicated Access Groups for granting SlapFive access, we suggest giving them a prefix like *SlapFive-CSM*.
* [ ] Create each SlapFive Role and assign the appropriate **Entity Access** and **Filters** as described in the [Configure Role-Based Permissions](/customizations/configure-role-based-permissions.md) section.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.slapfive.com/customizations/use-cloudflare-sso-to-assign-users-to-slapfive-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.