Enterprise users and permissions reference

• Users
• Permissions

Users

Users have permissions and roles.

Roles

Roles are groups of permissions. A single role can belong to several users.

InfluxDB Enterprise clusters have two built-in roles:

Global Admin

The Global Admin role has all 16 cluster permissions.

Admin

The Admin role has all cluster permissions except for the permissions to:

• Add/Remove Nodes
• Copy Shard
• Manage Shards
• Rebalance

Permissions

A permission (also privilege) is the ability to access a resource in some way, including:

• viewing the resource
• copying the resource
• dropping the resource
• writing to the resource
• full management capabilities

InfluxDB Enterprise clusters have 16 permissions:

In addition, two tokens govern Kapacitor permissions:

• KapacitorAPI: Grants the user permission to create, read, update and delete tasks, topics, handlers and similar Kapacitor artifacts.
• KapacitorConfigAPI: Grants the user permission to override the Kapacitor configuration dynamically using the configuration endpoint.

Permissions scope

Using the InfluxDB Enterprise Meta API, these permissions can be set at the cluster-wide level (for all databases at once) and for specific databases. For examples, see Manage authorization with the InfluxDB Enterprise Meta API.

Permission to Statement

The following table describes permissions required to execute the associated database statement.

Statement to Permission

The following table describes database statements and the permissions required to execute them. It also describes whether these permissions apply the the database or cluster level.