---
title: influxctl token update
description: The influxctl token update command updates a database token with specified permissions to resources in an InfluxDB cluster.
url: https://docs.influxdata.com/influxdb3/clustered/reference/cli/influxctl/token/update/
estimated_tokens: 779
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb3/clustered/reference/cli/influxctl/token/update/
date: '2026-05-15T15:46:14-06:00'
lastmod: '2026-05-15T15:46:14-06:00'
---

The `influxctl token update` command updates a database token with specified
permissions to resources in an InfluxDB cluster.

The `--read-database` and `--write-database` flags support the `*` wildcard
which grants read or write permissions to all databases. Enclose wildcards in
single or double quotes–for example: `'*'` or `"*"`.

## Usage

```sh
influxctl token update \
  [--read-database=<DATABASE_NAME>] \
  [--write-database=<DATABASE_NAME>] \
  <TOKEN_ID>
```

> [!Note]
> #### Existing permissions are replaced on update
>
> When updating token permissions, the existing permissions are replaced by the
> new permissions specified in the update command.
> To retain existing permissions, include them in the update command.

## Arguments

|  Argument   |        Description        |
|-------------|---------------------------|
|**TOKEN\_ID**|Database token ID to update|

## Flags

|Flag|                  |                    Description                     |
|----|------------------|----------------------------------------------------|
|    |`--read-database` |Grant read permissions to a database *(Repeatable)* |
|    |`--write-database`|Grant write permissions to a database *(Repeatable)*|
|`-h`|     `--help`     |                Output command help                 |

*Also see [`influxctl` global flags](/influxdb3/clustered/reference/cli/influxctl/#global-flags).*

## Examples

* [Update a token’s permissions](#update-a-tokens-permissions)
* [Update a token with read and write access to all databases](#update-a-token-with-read-and-write-access-to-all-databases)
* [Update a token with read-only access to multiple databases](#update-a-token-with-read-only-access-to-multiple-databases)
* [Update a token with mixed permissions to multiple databases](#update-a-token-with-mixed-permissions-to-multiple-databases)

In the examples below, replace the following:

* `DATABASE_NAME`: your InfluxDB Clustered database
* `DATABASE2_NAME`: your InfluxDB Clustered database
* `TOKEN_ID`: token ID to update

### Update a token’s permissions

```sh
influxctl token update \
  --read-database DATABASE_NAME \
  --write-database DATABASE_NAME \
  TOKEN_ID
```

### Update a token with read and write access to all databases

```sh
influxctl token update \
  --read-database "*" \
  --write-database "*" \
  TOKEN_ID
```

### Update a token with read-only access to multiple databases

```sh
influxctl token update \
  --read-database DATABASE_NAME \
  --read-database DATABASE2_NAME \
  TOKEN_ID
```

### Update a token with mixed permissions to multiple databases

```sh
influxctl token update \
  --read-database DATABASE_NAME \
  --read-database DATABASE2_NAME \
  --write-database DATABASE2_NAME \
  TOKEN_ID
```
| Argument | Description |
| --- | --- |
| Argument | Description |
| TOKEN_ID | Database token ID to update |

| Flag |  | Description |
| --- | --- | --- |
| Flag |  | Description |
|  | --read-database | Grant read permissions to a database  (Repeatable) |
|  | --write-database | Grant write permissions to a database  (Repeatable) |
| -h | --help | Output command help |