Dataforge if all your customers domains are setup on your cloudflare account, then you can make 1 API token that has access to your whole account, then just add that token to each account in your cluster (you'll have to go into each account to add the integration, then go into each domain to activate the integration, then go through the DNS in enhance to make sure the proxy is turned on for whatever records you want)... It's important to note that when you activate the integration in the domain DNS manager it will copy the enhance DNS config to overwrite whatever is currently at cloudflare, so make sure the enhance DNS has the correct values before you switch it on - all future updates to that domains DNS will need to be made in enhance, as it will copy the entry to cloudflare (if you only add it at cloudflare, enhance will eventually delete it).
If clients have their domains setup on their own cloudflare, then you'd need to get access to generate an API token to do the setup.
It's important to setup the integration if you're using cloudflare, because it would be part of your DR as enhance will update the DNS when migrating sites from backup to a new server during DR... You probably wouldn't want to have to do that manually during an outage.