Manage management tokens

Management tokens grant permission to perform administrative actions such as managing users, databases, and database tokens in your InfluxDB Cloud Dedicated cluster.

By default, management tokens are short-lived tokens issued by your identity provider for a specific client session (for example, influxctl).

However, for automation purposes, you can manually create management tokens that authenticate directly with your InfluxDB Cluster and do not require human interaction with your identity provider. Manually created management tokens provide full access to all account resources and aren’t affected by user groups.

• Create a management token
• List management tokens
• Revoke a management token

• Use a management token

influxctl management create \
  --expires-at $(date -v+1d -Iseconds) \
  --description "Example token description"

influxctl management list --format json

influxctl management revoke <TOKEN_ID>

Use a management token

Use management tokens to automate authorization for the influxctl CLI:

1. Create a management token and securely store the output token value. You’ll use it in the next step.
2. On the machine where the influxctl CLI is to be automated, update your influxctl connection profile by assigning the mgmt_token setting to the token string from the preceding step.

[[profile]]
  name = "default"
  product = "dedicated"
  account_id = "
ACCOUNT_ID
"
  cluster_id = "
CLUSTER_ID
"
  mgmt_token = "
MANAGEMENT_TOKEN
"

Replace the following:

• ACCOUNT_ID: InfluxDB Cloud Dedicated account ID
• CLUSTER_ID: InfluxDB Cloud Dedicated cluster ID
• MANAGEMENT_TOKEN: Management token string