Documentation

Update a database token

Use the Admin UI, the influxctl CLI, or the Management HTTP API to update a database token’s permissions InfluxDB Cloud Dedicated cluster.

The InfluxDB Cloud Dedicated administrative UI includes a portal for creating and managing database tokens.

Through this portal, administrators can edit a token’s permissions to:

  • Add read and write permissions for specific databases
  • Edit a token’s existing read and write permissions for a database

Open the Edit Database Token dialog

  1. To access the InfluxDB Cloud Dedicated Admin UI, visit the following URL in your browser:

  2. Use the credentials provided by InfluxData to log into the Admin UI. If you don’t have login credentials, contact InfluxData support.

  3. After you log in, the Account Management portal displays account information and the list of clusters associated with your account. Use the sort and filter options above the list to find a specific cluster.

  4. Click the row for the cluster that contains the database you want to manage tokens for.

  5. Click the Database Tokens button in the upper right corner of the Cluster screen.

  6. The Database Tokens portal displays the list of database tokens associated with the cluster. Use the sort and filter options above the list to find a specific token.

  7. Click the Options button (three vertical dots) to the right of the token you want to edit.

    Database token option menu
  8. Click Edit Token in the dropdown menu. The Edit Database Token dialog displays.

    Edit Database Token dialog
  9. In the Edit Database Token dialog, you can edit the token’s Description and permissions.

Edit token permissions

  1. Open the Edit Database Token dialog for the database token.

    The Edit Database Token dialog displays the token’s existing permissions. Each permission consists of:

    • A database (specific database name or All Databases)
    • Action permissions (Read and Write)
  2. To change which database a permission applies to, click the Database dropdown and select a different database or All Databases.

  3. To adjust the access level of the permission, use the Read and Write buttons under Actions to toggle these permissions on or off for the selected database.

Add token permissions

  1. Open the Edit Database Token dialog for the database token.
  2. In the dialog, click Add Permission.
  3. For the new permission, select a database from the dropdown.
  4. Toggle the Read and Write buttons to set the access level.

Use the influxctl token update command to update a database token’s permissions in your InfluxDB Cloud Dedicated cluster.

  1. If you haven’t already, download and install the influxctl CLI, and then configure an influxctl connection profile for your cluster.

  2. To list token IDs, run the influxctl token list command in your terminal.

    influxctl token list
    
    • Copy
    • Fill window

    Copy the token ID of the token you want to update.

  3. In your terminal, run the influxctl token update command and provide the following:

    • Token permissions (read and write)

      • --read-database: Grants read permissions to the specified database. Repeatable.
      • --write-database: Grants write permissions to the specified database. Repeatable.

      Both of these flags support the * wildcard which grants read or write permissions to all databases. Enclose wildcards in single or double quotes–for example: '*' or "*".

    • the token ID

influxctl token update \
  --description "my updated test token" \
  --read-database 
DATABASE_NAME
\
--write-database
DATABASE_NAME
\
TOKEN_ID
  • Copy
  • Fill window

Replace the following:

  • DATABASE_NAME: your InfluxDB Cloud Dedicated database- TOKEN ID: ID of the token to update

This example uses cURL to send a Management HTTP API request, but you can use any HTTP client.

  1. If you haven’t already, follow the instructions to install cURL for your system.

  2. In your terminal, use cURL to send a request to the following InfluxDB Cloud Dedicated endpoint:

    In the URL, provide the following:

    Provide the following request headers:

    • Accept: application/json to ensure the response body is JSON content
    • Content-Type: application/json to indicate the request body is JSON content
    • Authorization: Bearer and a Management API token for your cluster (see how to create a management token for Management API requests).

    In the request body, provide the following parameters:

    • permissions: an array of token permissions (read or write) objects:
      • "action": Specify read or write permission to the database.
      • "resource": Specify the database name.
    • description: Provide a description of the token.

The following example shows how to use the Management API to update a token’s permissions:

curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/TOKEN_ID"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "description": "my updated test token", "permissions": [ { "action": "read", "resource": "
DATABASE_NAME
"
}, { "action": "write", "resource": "
DATABASE_NAME
"
} ] }'
  • Copy
  • Fill window

Replace the following in your request:

  • ACCOUNT_ID
    : the ID of the InfluxDB Cloud Dedicated account to create the database token for
  • CLUSTER_ID
    : the ID of the InfluxDB Cloud Dedicated cluster to create the database token for
  • MANAGEMENT TOKEN: a management token for your InfluxDB Cloud Dedicated cluster
  • DATABASE_NAME
    : a InfluxDB Cloud Dedicated database that the token will have read or write permission to

Existing permissions are replaced on update

When updating token permissions, the existing permissions are replaced by the new permissions specified in the update command. To retain existing permissions, include them in the update command.

Examples

In the examples below, replace the following:

  • DATABASE_NAME: your InfluxDB Cloud Dedicated database
  • DATABASE2_NAME: your InfluxDB Cloud Dedicated database
  • TOKEN ID: ID of the token to update
  • ACCOUNT_ID: the ID of the InfluxDB Cloud Dedicated account to create the database token for
  • CLUSTER_ID: the ID of the InfluxDB Cloud Dedicated cluster to create the database token for
  • MANAGEMENT TOKEN: a management token for your InfluxDB Cloud Dedicated cluster

Update a token for read and write access to a database

influxctl token update \
  --description "Read/write to 
DATABASE_NAME
"
\
--read-database
DATABASE_NAME
\
--write-database
DATABASE_NAME
\
TOKEN_ID
  • Copy
  • Fill window
curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "description": "Read/write to
DATABASE_NAME
",
"permissions": [ { "action": "read", "resource": "
DATABASE_NAME
"
}, { "action": "write", "resource": "
DATABASE_NAME
"
} ] }'
  • Copy
  • Fill window

Update a token with read and write access to all databases

influxctl token update \
  --read-database "*" \
  --write-database "*" \
  
TOKEN_ID
  • Copy
  • Fill window
curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "permissions": [ { "action": "read", "resource": "*" }, { "action": "write", "resource": "*" } ] }'
  • Copy
  • Fill window

Update a token for read-only access to a database

influxctl token update \
  --read-database 
DATABASE_NAME
\
TOKEN_ID
  • Copy
  • Fill window
curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "description": "Read-only token for
DATABASE_NAME
",
"permissions": [ { "action": "read", "resource": "
DATABASE_NAME
"
} ] }'
  • Copy
  • Fill window

Update a token to provide read-only access to multiple databases

influxctl token update \
  --description "Read-only token for 
DATABASE_NAME
and
DATABASE2_NAME
"
\
--read-database
DATABASE_NAME
\
--read-database
DATABASE2_NAME
\
TOKEN_ID
  • Copy
  • Fill window
curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "description": "Read-only token for
DATABASE_NAME
and
DATABASE2_NAME
",
"permissions": [ { "action": "read", "resource": "
DATABASE_NAME
"
}, { "action": "read", "resource": "
DATABASE2_NAME
"
} ] }'
  • Copy
  • Fill window

Update a token to provide mixed permissions to multiple databases

influxctl token update \
  --read-database 
DATABASE_NAME
\
--read-database
DATABASE2_NAME
\
--write-database
DATABASE2_NAME
\
TOKEN_ID
  • Copy
  • Fill window
curl \
   --location "https://console.influxdata.com/api/v0/accounts/
ACCOUNT_ID
/clusters/
CLUSTER_ID
/tokens/
TOKEN_ID
"
\
--request PATCH \ --header "Accept: application/json" \ --header 'Content-Type: application/json' \ --header "Authorization: Bearer
MANAGEMENT_TOKEN
"
\
--data '{ "description": "Read-only on
DATABASE_NAME
, read/write on
DATABASE2_NAME
",
"permissions": [ { "action": "read", "resource": "
DATABASE_NAME
"
}, { "action": "read", "resource": "
DATABASE2_NAME
"
}, { "action": "write", "resource": "
DATABASE2_NAME
"
}, ] }'
  • Copy
  • Fill window

Was this page helpful?

Thank you for your feedback!


The future of Flux

Flux is going into maintenance mode. You can continue using it as you currently are without any changes to your code.

Read more

Now Generally Available

InfluxDB 3 Core and Enterprise

Start fast. Scale faster.

Get the Updates

InfluxDB 3 Core is an open source, high-speed, recent-data engine that collects and processes data in real-time and persists it to local disk or object storage. InfluxDB 3 Enterprise builds on Core’s foundation, adding high availability, read replicas, enhanced security, and data compaction for faster queries and optimized storage. A free tier of InfluxDB 3 Enterprise is available for non-commercial at-home or hobbyist use.

For more information, check out: