Manage admin tokens

Manage InfluxDB 3 Core admin tokens to authorize server actions, influxdb3 CLI commands, and HTTP API endpoints for your InfluxDB 3 Core instance. Administrative (admin) tokens provide full system access and management capabilities for your InfluxDB 3 Core instance.

Admin tokens can create, edit, and delete other admin tokens.

InfluxDB 3 Core supports two types of admin tokens:

• Operator token: A system-generated administrative token with the name _admin.

  • Cannot be edited or deleted
  • Never expires
  • Cannot be recreated if lost (future functionality)
  • Can be regenerated using the CLI

• Named admin token: User-defined administrative tokens with full admin permissions.

  • Can be created, edited, and deleted
  • Support expiration dates
  • Cannot modify or remove the operator token

An InfluxDB 3 Core instance can have one operator token and unlimited named admin tokens.

influxdb3 create token --admin

curl -X POST "http://localhost:8181/api/v3/configure/token/admin" \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json'

influxdb3 show tokens 

curl -G \
"http://localhost:8181/api/v3/query_sql" \
--data-urlencode "db=_internal" \
--data-urlencode "q=SELECT * FROM system.tokens WHERE permissions = '*:*:*'" \
--header 'Accept: application/json' \
--header "Authorization: Bearer AUTH_TOKEN"

influxdb3 create token --admin \
  --regenerate
  OPERATOR_TOKEN

curl -X POST "http://localhost:8181/api/v3/configure/token/admin/regenerate" \
  --header 'Authorization Bearer OPERATOR_TOKEN' \
  --header 'Accept: application/json'
  --header 'Content-Type: application/json'