...
Only people you’ve added to the “Include rules” will receive a PIN.
Next, you can (optionally) configure Google to automate more of this process.
...
Automating
...
Access Authentication via Google
Google can authenticate users for you, and forward the authenticated info to Cloudflare for comparison against your rules. Currently (as configured above), Cloudflare will send a PIN to the email (if they’re on the Allow list) which is requesting access, and after entering the PIN - the user will be permitted to access the subdomain . If the user has a Google-managed email, then they can skip a step (if not - they’re stuck using a PIN).
...