Manage admin tokens

Manage InfluxDB 3 Enterprise admin tokens to authorize server actions, influxdb3 CLI commands, and HTTP API endpoints for your InfluxDB 3 Enterprise instance. Administrative (admin) tokens provide full system access and management capabilities for your InfluxDB 3 Enterprise instance.

Admin tokens can create, edit, and delete other admin tokens, as well as manage resource tokens.

InfluxDB 3 Enterprise supports two types of admin tokens:

• Operator token: A system-generated administrative token with the name _admin.

  • Cannot be edited or deleted
  • Never expires
  • Cannot be recreated if lost (future functionality)
  • Can be regenerated using the CLI

• Named admin token: User-defined administrative tokens with full admin permissions.

  • Can be created, edited, and deleted
  • Support expiration dates
  • Cannot modify or remove the operator token

An InfluxDB 3 Enterprise instance can have one operator token and unlimited named admin tokens.

influxdb3 create token --admin --name TOKEN_NAME 

curl -X POST "http://localhost:8181/api/v3/configure/token/admin" \
  --header 'Authorization Bearer ADMIN_TOKEN' \
  --json '{
            "name": "TOKEN_NAME"
          }'

influxdb3 show tokens 

curl -G \
"http://localhost:8181/api/v3/query_sql" \
--data-urlencode "db=_internal" \
--data-urlencode "q=SELECT * FROM system.tokens WHERE permissions = '*:*:*'" \
--header 'Accept: application/json' \
--header "Authorization: Bearer AUTH_TOKEN"

influxdb3 create token --admin \
  --token OPERATOR_TOKEN \
  --regenerate

curl -X POST "http://localhost:8181/api/v3/configure/token/admin/regenerate" \
  --header 'Authorization Bearer OPERATOR_TOKEN'