Manage tokens
Limited availability
InfluxDB Clustered is currently only available to a limited group of InfluxData customers. If interested in being part of the limited access group, please contact the InfluxData Sales team.
InfluxDB uses token authentication to authorize access to data in your InfluxDB cluster. Each token grants read and write permissions to one or more databases and allows for actions like writing and querying data.
All read and write actions performed against time series data in your InfluxDB
cluster must be authorized using a token. Administrative actions
such as managing tokens and databases are authorized using management tokens
issued by Auth0. Management tokens allow clients, such as the influxctl CLI,
to perform administrative actions.
Store secure tokens in a secret store
Token strings are returned only on token creation. We recommend storing database tokens in a secure secret store. For example, see how to authenticate Telegraf using tokens in your OS secret store.
Tokens cannot be updated
Once created, token permissions cannot be updated. If you need a token with different permissions, create a token with the appropriate permissions.
Create a token
Use the influxctl token create command to create a database token for reading and writing data in your InfluxDB cluster. Provide a token description and permissions for databases.
influxctl token create \
--read-database DATABASE1_NAME \
--read-database DATABASE2_NAME \
--write-database DATABASE2_NAME \
"Read-only on DATABASE1_NAME, Read/write on DATABASE2_NAME"
Update a token
Use the influxctl token update command to update a database token’s permissions in your InfluxDB cluster.
influxctl token update \
--read-database <DATABASE1_NAME> \
--read-database <DATABASE2_NAME> \
--write-database <DATABASE2_NAME> \
<TOKEN_ID>
List tokens
Use the influxctl token list command to list tokens in your InfluxDB cluster.
influxctl token list
Delete a token
Use the influxctl token delete command to delete a token from your InfluxDB cluster and revoke all permissions associated with the token. Provide the ID of the token you want to delete.
influxctl token delete <TOKEN_ID>
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support.