Add a user
How you install Explorer depends on your InfluxDB 3 server
Starting with InfluxDB 3 Enterprise v3.11, Explorer is included with the server and runs as WebAssembly (WASM)–there’s no separate container to install. Docker is required for InfluxDB 3 Core and Enterprise earlier than v3.11, and remains an option for later Enterprise releases. See Install Explorer to find the instructions for your server.
Administrators can add users to an InfluxDB 3 Enterprise server from InfluxDB 3 Explorer. When you add a user, you select how the user signs in and assign roles to the user. The user can sign in as soon as you add them.
You must have the Admin role to add a user.
- Add a user
- Add a user that signs in with SSO
- Add a user without a role
- Authentication methods that the server doesn’t allow
Add a user
Navigate to Security > Manage Users.
Click Add User.
Under Authentication, select how the user signs in: Password, SSO, or Both. The default is Password. For more information, see Authentication methods.
For Password or Both, enter the following:
- Username: 3 to 64 characters: letters, numbers, underscores, and hyphens.
- Password: 10 to 64 characters.
- Display name (optional): The name that Explorer displays for the user.
- Require password change at first sign-in: Selected by default. The user must change the password the first time they sign in. See Change a required password.
For SSO or Both, enter the OAuth ID of the user. See Add a user that signs in with SSO.
Under Roles, select the roles to assign to the user. Each role displays its description from the server.
Click Create Account.
Explorer adds the user to the Manage Users page. Share the username and password with the user through a secure channel.
You can’t change the authentication method later
To change how a user signs in, delete the user and add the user again.
Give a user a second way to sign in
An administrator can’t reset a forgotten password. If the server uses an identity provider, select Both so that the user can sign in with SSO if they forget their password.
Add a user that signs in with SSO
To add a user that signs in through an identity provider, select SSO or
Both under Authentication, and then enter the OAuth ID of the
user.
The OAuth ID must match the subject (sub) that your identity provider
sends for the user.
If you select SSO, Explorer doesn’t ask for a username, a password, or a display name. To set a display name for the user after you add them, see Edit a display name.
Add a user without a role
If you don’t select a role, the user has only the basic permissions of the server until an administrator assigns roles. To assign roles later, see Change the roles of a user.
Authentication methods that the server doesn’t allow
If you select an authentication method that the server doesn’t have turned on, Explorer displays a warning–for example:
This server isn't running with SSO sign-in enabled. The account will be created, but this person can't sign in with it until the server is restarted with --user-auth-type including oauth.Explorer still adds the user, but the user can’t sign in until you restart the server with that method turned on.
To turn on an authentication method, see Authentication methods.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Explorer and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support.