Revoke a database token

The InfluxDB Cloud Dedicated administrative UI includes a portal for creating and managing database tokens.

Administrators can use this portal to:

• View token details
• Add read and write permissions for specific databases to a token
• Edit a token’s existing read and write permissions for a database
• Create a database token
• Revoke a database token

1. To access the InfluxDB Cloud Dedicated Admin UI, visit the following URL in your browser:

   https://cluster-id.a.influxdb.io
   

2. Use the credentials provided by InfluxData to log into the Admin UI. If you don’t have login credentials, contact InfluxData support.

3. After you log in, the Account Management portal displays account information and the list of clusters associated with your account.

4. Click the row for the cluster that contains the database you want to manage tokens for. You can Search clusters by name or ID to filter the list and use the sort button and column headers to sort the list.

5. Click the Database Tokens button in the upper right corner of the Cluster screen.

6. The Database Tokens portal displays the list of database tokens associated with the cluster. Use the sort and filter options above the list to find a specific token.

7. Click the Options button (three vertical dots) to the right of the token you want to revoke.

8. In the options menu, click Revoke Token. The Revoke Database Token dialog displays.

   

9. Check the box to confirm that you understand the risk.

10. Click the Revoke Token button. The token is revoked and filtered from the list of active tokens.

Use the influxctl token revoke command to revoke a database token and remove all permissions associated with the token.

1. If you haven’t already, download and install the influxctl CLI, and then configure an influxctl connection profile for your cluster.

2. To list token IDs, run the influxctl token list command in your terminal.

   influxctl token list

   Copy the token ID of the token you want to revoke.

3. Run the influxctl token revoke command and provide the following:

   • Token ID to revoke

4. Confirm that you want to revoke the token.

influxctl token revoke 
TOKEN_ID

This example uses cURL to send a Management HTTP API request, but you can use any HTTP client.

1. If you haven’t already, follow the instructions to install cURL for your system.

2. In your terminal, use cURL to send a request to the following InfluxDB Cloud Dedicated endpoint:

   DELETE https://console.influxdata.com/api/v0/accounts/ACCOUNT_ID/clusters/CLUSTER_ID/tokens/TOKEN_ID

   In the URL, provide the following:

   • ACCOUNT_ID: The ID of the account that the cluster belongs to (see how to list cluster details).
   • CLUSTER_ID: The ID of the cluster that you want to manage (see how to list cluster details).
   • TOKEN_ID: The ID of the database token that you want to revoke (see how to list token details).

   Provide the following request headers:

   • Accept: application/json to ensure the response body is JSON content
   • Authorization: Bearer and a Management API token for your cluster (see how to create a management token for Management API requests).

   Specify the DELETE request method.

The following example shows how to use the Management API to revoke a database token and remove all permissions associated with the token:

curl \
 --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
" \
 --request DELETE \
 --header "Accept: application/json" \
 --header "Authorization: Bearer $
MANAGEMENT_TOKEN" \

Replace the following:

• ACCOUNT_ID: the ID of the InfluxDB Cloud Dedicated account associated with the token you want to revoke
• CLUSTER_ID: the ID of the InfluxDB Cloud Dedicated cluster associated with the token you want to revoke
• MANAGEMENT TOKEN: a management token for your InfluxDB Cloud Dedicated cluster
• TOKEN_ID: the ID of the database token to revoke