Manage users with InfluxDB 3 Explorer
How you install Explorer depends on your InfluxDB 3 server
Starting with InfluxDB 3 Enterprise v3.11, Explorer is included with the server and runs as WebAssembly (WASM)–there’s no separate container to install. Docker is required for InfluxDB 3 Core and Enterprise earlier than v3.11, and remains an option for later Enterprise releases. See Install Explorer to find the instructions for your server.
Users are accounts that can sign in to InfluxDB 3 Explorer and work with an InfluxDB 3 Enterprise server based on their assigned roles. The users that you manage in Explorer are the users of the InfluxDB 3 Enterprise server.
To manage users, navigate to Security > Manage Users in Explorer.
Explorer manages users only when the InfluxDB 3 Enterprise server has user authentication turned on. See When Explorer requires sign-in. If you’re running the Docker container, Explorer must also be running in admin mode.
Authentication methods
Every user signs in with one of the following authentication methods:
- Password: The user signs in with a username and password stored in InfluxDB 3 Enterprise.
- SSO: The user signs in through an OpenID Connect (OIDC) identity
provider.
The OAuth ID of the user matches the subject (
sub) that the identity provider sends. - Both: The user signs in with either a password or SSO.
An administrator selects the authentication method when adding a user. Password is selected by default. You can’t change the authentication method of a user later.
The Auth method column on the Manage Users page displays SSO for any user with an OAuth ID, including a user that also has a password, and Password for every other user.
For more information about how users sign in, see Authentication.
User status
Each user has one of the following statuses:
- Active: The user can sign in and work in Explorer based on their assigned roles.
- Change required: The user must change their password the next time they sign in. See Require a password change.
User roles
Roles determine what a user can see and do in Explorer. A user can have more than one role. The access of a user is the combination of all roles assigned to the user.
InfluxDB 3 Enterprise provides the following built-in roles:
| Role | In Explorer, the role can |
|---|---|
| Admin | Use every page and action, including managing users and tokens |
| Member | Query and write data, use dashboards, create databases, and view users |
| Auditor | View databases and users. Can’t query or write data |
Of the built-in roles, only Admin can add, update, or delete users. For the pages and actions each role allows, see User roles and access. To assign roles, see Change the roles of a user.
For what each role allows, and for information about custom roles, see Role-based access control (RBAC) in the InfluxDB 3 Enterprise documentation.
Manage your account
View your roles, change your password, and sign out of InfluxDB 3 Explorer.
Add a user
Use InfluxDB 3 Explorer to add a user to an InfluxDB 3 Enterprise server, select how the user signs in, and assign roles.
Update users
Use InfluxDB 3 Explorer to change the roles of a user, edit a display name, and require a user to change their password.
Delete a user
Use InfluxDB 3 Explorer to delete a user from an InfluxDB 3 Enterprise server and immediately revoke the user’s access.
User roles and access
Learn which InfluxDB 3 Explorer pages and actions each built-in InfluxDB 3 Enterprise role allows, and what Explorer displays when the server refuses access.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Explorer and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support.