Bind a zone to the correct client before enabling self-service in PD Cloudflare DNS. Assignment gives access to that zone; it is separate from changing its authoritative nameservers or transferring the domain registration.

Check the intended owner

Confirm the domain, provider account, client account and any linked service/domain. A similar domain name or company name is not enough to establish ownership. Choose the correct billing account before saving an assignment.

Assign and verify access

1. Open PD Modules → Cloudflare DNS → Zones.
2. Find the intended zone and open its ⋯ menu.
3. Choose Assign to client.
4. Select the correct client and, where appropriate, a domain or service on that account.
5. Save, then verify the intended client can find the zone through My Tools in the client portal, then the DNS manager.
6. Confirm unrelated client accounts do not receive that zone through your controlled access-review process.

Blesta uses My Tools and in-page zone tabs. The module’s navigation-link placement and domain/service-link settings do not add those links to Blesta; choose a zone navigation style that includes the in-page tabs.

Control editing separately

Use Lock on the zone menu when client changes should stop while staff retain management. Review any domain-only view-only/hidden policy and package limits too. A zone can be assigned correctly but intentionally unavailable for editing.

Forwarding-managed records are protected by their feature. Do not remove that protection by trying the same edit through a different interface; manage the owning forwarding configuration instead.

Remove access without deleting DNS

Unbinding a client removes that access while leaving the provider zone and records in place. Delete zone is a different destructive action at Cloudflare and is not the way to revoke a client’s access.

If the client cannot see the expected zone, check its assignment, linked account, navigation and visibility policy first. If it is visible but changes are refused, inspect locks, limits and the actual error. Use the allowance guide for package-policy checks.

See the PD Cloudflare DNS Blesta guide for related tasks, or explore the module.