Role-based access control (RBAC)
RBAC is part of the user authentication preview
Role-based access control applies to the multi-user authentication preview,
which is off by default in InfluxDB 3 Enterprise. Existing apiv3_
token workflows are unaffected. See
Manage users and authentication
to enable the preview.
Role-based access control (RBAC) governs what authenticated users can do in InfluxDB 3 Enterprise. Each user is assigned one or more built-in roles that determine their permissions.
Built-in roles
InfluxDB 3 Enterprise provides three built-in roles:
- Admin: Full administrative access, including user and role management.
- Auditor: Read access intended for reviewing and auditing the system.
- Member: Standard access for working with data.
Assign roles
Assign roles to a user with the influxdb3 update user-roles command. See
Manage users and authentication
for the user-management workflow.
Limitations
RBAC has the following known limitations in InfluxDB 3 Enterprise:
- Token scope can exceed role scope: A non-admin user can currently create tokens with broader permissions than their assigned role.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Enterprise and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support. Customers using a trial license can email trial@influxdata.com for assistance.