Documentation

InfluxDB Enterprise users

Users

Users have permissions and roles.

Roles

Roles are groups of permissions. A single role can belong to several users.

InfluxDB Enterprise clusters have two built-in roles:

Global Admin

The Global Admin role has all 16 cluster permissions.

Admin

The Admin role has all cluster permissions except for the permissions to:

  • Add/Remove Nodes
  • Copy Shard
  • Manage Shards
  • Rebalance

Permissions

InfluxDB Enterprise clusters have 16 permissions:

PermissionDescription
View AdminPermission to view or edit admin screens
View ChronografPermission to use Chronograf tools
Create DatabasesPermission to create databases
Create Users & RolesPermission to create users and roles
Add/Remove NodesPermission to add/remove nodes from a cluster
Drop DatabasesPermission to drop databases
Drop DataPermission to drop measurements and series
ReadPermission to read data
WritePermission to write data
RebalancePermission to rebalance a cluster
Manage ShardsPermission to copy and delete shards
Manage Continuous QueriesPermission to create, show, and drop continuous queries
Manage QueriesPermission to show and kill queries
Manage SubscriptionsPermission to show, add, and drop subscriptions
MonitorPermission to show stats and diagnostics
Copy ShardPermission to copy shards

Permission to Statement

The following table describes permissions required to execute the associated database statement.

PermissionStatement
CreateDatabasePermissionAlterRetentionPolicyStatement, CreateDatabaseStatement, CreateRetentionPolicyStatement, ShowRetentionPoliciesStatement
ManageContinuousQueryPermissionCreateContinuousQueryStatement, DropContinuousQueryStatement, ShowContinuousQueriesStatement
ManageSubscriptionPermissionCreateSubscriptionStatement, DropSubscriptionStatement, ShowSubscriptionsStatement
CreateUserAndRolePermissionCreateUserStatement, DropUserStatement, GrantAdminStatement, GrantStatement, RevokeAdminStatement, RevokeStatement, SetPasswordUserStatement, ShowGrantsForUserStatement, ShowUsersStatement
DropDataPermissionDeleteSeriesStatement, DeleteStatement, DropMeasurementStatement, DropSeriesStatement
DropDatabasePermissionDropDatabaseStatement, DropRetentionPolicyStatement
ManageShardPermissionDropShardStatement,ShowShardGroupsStatement, ShowShardsStatement
ManageQueryPermissionKillQueryStatement, ShowQueriesStatement
MonitorPermissionShowDiagnosticsStatement, ShowStatsStatement
ReadDataPermissionShowFieldKeysStatement, ShowMeasurementsStatement, ShowSeriesStatement, ShowTagKeysStatement, ShowTagValuesStatement, ShowRetentionPoliciesStatement
NoPermissionsShowDatabasesStatement
Determined by type of select statementSelectStatement

Statement to Permission

The following table describes database statements and the permissions required to execute them. It also describes whether these permissions apply the the database or cluster level.

StatementPermissionsScope
AlterRetentionPolicyStatementCreateDatabasePermissionDatabase
CreateContinuousQueryStatementManageContinuousQueryPermissionDatabase
CreateDatabaseStatementCreateDatabasePermissionCluster
CreateRetentionPolicyStatementCreateDatabasePermissionDatabase
CreateSubscriptionStatementManageSubscriptionPermissionDatabase
CreateUserStatementCreateUserAndRolePermissionDatabase
DeleteSeriesStatementDropDataPermissionDatabase
DeleteStatementDropDataPermissionDatabase
DropContinuousQueryStatementManageContinuousQueryPermissionDatabase
DropDatabaseStatementDropDatabasePermissionCluster
DropMeasurementStatementDropDataPermissionDatabase
DropRetentionPolicyStatementDropDatabasePermissionDatabase
DropSeriesStatementDropDataPermissionDatabase
DropShardStatementManageShardPermissionCluster
DropSubscriptionStatementManageSubscriptionPermissionDatabase
DropUserStatementCreateUserAndRolePermissionDatabase
GrantAdminStatementCreateUserAndRolePermissionDatabase
GrantStatementCreateUserAndRolePermissionDatabase
KillQueryStatementManageQueryPermissionDatabase
RevokeAdminStatementCreateUserAndRolePermissionDatabase
RevokeStatementCreateUserAndRolePermissionDatabase
SelectStatementDetermined by type of select statementn/a
SetPasswordUserStatementCreateUserAndRolePermissionDatabase
ShowContinuousQueriesStatementManageContinuousQueryPermissionDatabase
ShowDatabasesStatementNoPermissionsClusterThe user’s grants determine which databases are returned in the results.
ShowDiagnosticsStatementMonitorPermissionDatabase
ShowFieldKeysStatementReadDataPermissionDatabase
ShowGrantsForUserStatementCreateUserAndRolePermissionDatabase
ShowMeasurementsStatementReadDataPermissionDatabase
ShowQueriesStatementManageQueryPermissionDatabase
ShowRetentionPoliciesStatementCreateDatabasePermissionDatabase
ShowSeriesStatementReadDataPermissionDatabase
ShowShardGroupsStatementManageShardPermissionCluster
ShowShardsStatementManageShardPermissionCluster
ShowStatsStatementMonitorPermissionDatabase
ShowSubscriptionsStatementManageSubscriptionPermissionDatabase
ShowTagKeysStatementReadDataPermissionDatabase
ShowTagValuesStatementReadDataPermissionDatabase
ShowUsersStatementCreateUserAndRolePermissionDatabase

Set your InfluxDB URL

Upgrade to InfluxDB Cloud or InfluxDB 2.0!

InfluxDB Cloud and InfluxDB OSS 2.0 ready for production.