Manage tokens
InfluxDB 3 Cloud uses token-based authorization to authenticate and authorize actions in your instance.
Manage InfluxDB 3 Cloud tokens with the influxdb3 CLI
In InfluxDB 3 Cloud, you create and manage tokens with the
influxdb3 CLI or the InfluxDB
HTTP API.
Token types
InfluxDB 3 Cloud supports the following token types:
- Admin tokens: Grant full administrative access to all actions and
resources in the instance.
- Operator token: The first admin token on an instance. InfluxData
manages the operator token for your InfluxDB 3 Cloud instance.
- Never expires
- Cannot be edited or deleted
- Named admin tokens: Additional admin tokens that you create and manage.
- Can be created, edited, and deleted
- Long-lived by default and expire only if you set an expiration
- Cannot modify or remove the operator token
- Operator token: The first admin token on an instance. InfluxData
manages the operator token for your InfluxDB 3 Cloud instance.
- Database tokens: Grant scoped read and write access to specific
databases. Use database tokens to authorize applications that write or query
data.
- Grant
read,write, or both to one or more databases - Cannot perform administrative actions
- Grant
Store secure tokens in a secret store
Token strings are returned only when you create the token. Store tokens in a secure secret store. Anyone with access to an admin token has full control over your InfluxDB 3 Cloud instance. If you lose a token string, recreate the token.
Create a token
Before you create tokens:
- Configure the
influxdb3CLI and log in to your instance. - Make sure you have admin privileges. Creating tokens requires admin access. If your user doesn’t have admin access, ask an administrator to create a token for you.
Create a named admin token:
influxdb3 create token --admin --name "support-2026"To set an expiration, add --expiry with a duration (for example, 90d or
1y):
influxdb3 create token --admin --name "temp-90d" --expiry 90dCreate a database token with scoped read and write permissions:
influxdb3 create token \
--permission "db:DATABASE_NAME:read,write" \
--name "Read/write token for DATABASE_NAME"Copy the raw token string immediately and store it securely. It’s shown only once.
List tokens
List token names, types, and expirations (token strings aren’t shown):
influxdb3 show tokensDelete a token
influxdb3 delete token --token-name "TOKEN_NAME"Because InfluxDB 3 Cloud runs the same InfluxDB 3 engine as InfluxDB 3 Enterprise, token management works the same way. For more details, see Manage tokens in InfluxDB 3 Enterprise.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Cloud and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support.