Documentation

InfluxDB Enterprise users

InfluxDB Enterprise users have functions that are either specific to the web console or specific to the cluster:

Users                            Cluster              Permissions

Penelope
   O
  \|/
   |    ----------------------> Dev Account  --------> Manage Queries
  / \                                        --------> Monitor
                                             --------> Add/Remove Nodes
Jim
   O
  \|/
   |    ----------------------> Marketing Account ---> View Admin
  / \                                             ---> Graph Role ---> Read
                                                  ---> View Chronograf

Cluster user information

In the cluster, individual users are assigned to an account. Cluster accounts have permissions and roles.

In the diagram above, Penelope is assigned to the Dev Account and Jim is assigned to the Marketing Account. The Dev Account includes the permissions to manage queries, monitor the cluster, and add/remove nodes from the cluster. The Marketing Account includes the permission to view and edit the admin screens as well as the Graph Role which contains the permissions to read data and view Chronograf.

Roles

Roles are groups of permissions. A single role can belong to several cluster accounts.

InfluxDB Enterprise clusters have two built-in roles:

Global Admin

The Global Admin role has all 16 cluster permissions.

Admin

The Admin role has all cluster permissions except for the permissions to:

  • Add/Remove Nodes
  • Copy Shard
  • Manage Shards
  • Rebalance

Permissions

InfluxDB Enterprise clusters have 16 permissions:

View Admin

Permission to view or edit admin screens.

View Chronograf

Permission to use Chronograf tools.

Create Databases

Permission to create databases.

Create Users & Roles

Permission to create users and roles.

Add/Remove nodes

Permission to add/remove nodes from a cluster.

Drop Databases

Permission to drop databases.

Drop Data

Permission to drop measurements and series.

Read

Permission to read data.

Write

Permission to write data.

Rebalance

Permission to rebalance a cluster.

Manage Shards

Permission to copy and delete shards.

Manage continuous queries

Permission to create, show, and drop continuous queries.

Manage Queries

Permission to show and kill queries.

Manage Subscriptions

Permission to show, add, and drop subscriptions.

Monitor

Permission to show stats and diagnostics.

Copy Shard

Permission to copy shards.

Permission to Statement

The following table describes permissions required to execute the associated database statement. It also describes whether these permissions apply just to InfluxDB (Database) or InfluxDB Enterprise (Cluster).

PermissionStatement
CreateDatabasePermissionAlterRetentionPolicyStatement, CreateDatabaseStatement, CreateRetentionPolicyStatement, ShowRetentionPoliciesStatement
ManageContinuousQueryPermissionCreateContinuousQueryStatement, DropContinuousQueryStatement, ShowContinuousQueriesStatement
ManageSubscriptionPermissionCreateSubscriptionStatement, DropSubscriptionStatement, ShowSubscriptionsStatement
CreateUserAndRolePermissionCreateUserStatement, DropUserStatement, GrantAdminStatement, GrantStatement, RevokeAdminStatement, RevokeStatement, SetPasswordUserStatement, ShowGrantsForUserStatement, ShowUsersStatement
DropDataPermissionDeleteSeriesStatement, DeleteStatement, DropMeasurementStatement, DropSeriesStatement
DropDatabasePermissionDropDatabaseStatement, DropRetentionPolicyStatement
ManageShardPermissionDropShardStatement,ShowShardGroupsStatement, ShowShardsStatement
ManageQueryPermissionKillQueryStatement, ShowQueriesStatement
MonitorPermissionShowDiagnosticsStatement, ShowStatsStatement
ReadDataPermissionShowFieldKeysStatement, ShowMeasurementsStatement, ShowSeriesStatement, ShowTagKeysStatement, ShowTagValuesStatement, ShowRetentionPoliciesStatement
NoPermissionsShowDatabasesStatement
Determined by type of select statementSelectStatement

Statement to Permission

The following table describes database statements and the permissions required to execute them. It also describes whether these permissions apply just to InfluxDB (Database) or InfluxDB Enterprise (Cluster).

StatmentPermissionsScope
AlterRetentionPolicyStatementCreateDatabasePermissionDatabase
CreateContinuousQueryStatementManageContinuousQueryPermissionDatabase
CreateDatabaseStatementCreateDatabasePermissionCluster
CreateRetentionPolicyStatementCreateDatabasePermissionDatabase
CreateSubscriptionStatementManageSubscriptionPermissionDatabase
CreateUserStatementCreateUserAndRolePermissionDatabase
DeleteSeriesStatementDropDataPermissionDatabase
DeleteStatementDropDataPermissionDatabase
DropContinuousQueryStatementManageContinuousQueryPermissionDatabase
DropDatabaseStatementDropDatabasePermissionCluster
DropMeasurementStatementDropDataPermissionDatabase
DropRetentionPolicyStatementDropDatabasePermissionDatabase
DropSeriesStatementDropDataPermissionDatabase
DropShardStatementManageShardPermissionCluster
DropSubscriptionStatementManageSubscriptionPermissionDatabase
DropUserStatementCreateUserAndRolePermissionDatabase
GrantAdminStatementCreateUserAndRolePermissionDatabase
GrantStatementCreateUserAndRolePermissionDatabase
KillQueryStatementManageQueryPermissionDatabase
RevokeAdminStatementCreateUserAndRolePermissionDatabase
RevokeStatementCreateUserAndRolePermissionDatabase
SelectStatementDetermined by type of select statementn/a
SetPasswordUserStatementCreateUserAndRolePermissionDatabase
ShowContinuousQueriesStatementManageContinuousQueryPermissionDatabase
ShowDatabasesStatementNoPermissionsCluster
ShowDiagnosticsStatementMonitorPermissionDatabase
ShowFieldKeysStatementReadDataPermissionDatabase
ShowGrantsForUserStatementCreateUserAndRolePermissionDatabase
ShowMeasurementsStatementReadDataPermissionDatabase
ShowQueriesStatementManageQueryPermissionDatabase
ShowRetentionPoliciesStatementCreateDatabasePermissionDatabase
ShowSeriesStatementReadDataPermissionDatabase
ShowShardGroupsStatementManageShardPermissionCluster
ShowShardsStatementManageShardPermissionCluster
ShowStatsStatementMonitorPermissionDatabase
ShowSubscriptionsStatementManageSubscriptionPermissionDatabase
ShowTagKeysStatementReadDataPermissionDatabase
ShowTagValuesStatementReadDataPermissionDatabase
ShowUsersStatementCreateUserAndRolePermissionDatabase

Was this page helpful?

Thank you for your feedback!


Set your InfluxDB URL

Linux Package Signing Key Rotation

All signed InfluxData Linux packages have been resigned with an updated key. If using Linux, you may need to update your package configuration to continue to download and verify InfluxData software packages.

For more information, see the Linux Package Signing Key Rotation blog post.

InfluxDB Cloud backed by InfluxDB IOx

All InfluxDB Cloud organizations created on or after January 31, 2023 are backed by the new InfluxDB IOx storage engine. Check the right column of your InfluxDB Cloud organization homepage to see which InfluxDB storage engine you’re using.

If powered by IOx, this is the correct documentation.

If powered by TSM, see the TSM-based InfluxDB Cloud documentation.

InfluxDB Cloud backed by InfluxDB TSM

All InfluxDB Cloud organizations created on or after January 31, 2023 are backed by the new InfluxDB IOx storage engine which enables nearly unlimited series cardinality and SQL query support. Check the right column of your InfluxDB Cloud organization homepage to see which InfluxDB storage engine you’re using.

If powered by TSM, this is the correct documentation.

If powered by IOx, see the IOx-based InfluxDB Cloud documentation.

State of the InfluxDB Cloud (IOx) documentation

The new documentation for InfluxDB Cloud backed by InfluxDB IOx is a work in progress. We are adding new information and content almost daily. Thank you for your patience!

If there is specific information you’re looking for, please submit a documentation issue.