---
title: Manage users with InfluxDB 3 Explorer
description: Use InfluxDB 3 Explorer to manage the users of an InfluxDB 3 Enterprise server, including how each user signs in and the roles assigned to each user.
url: https://docs.influxdata.com/influxdb3/explorer/manage-users/
estimated_tokens: 1308
product: InfluxDB 3 Explorer
version: explorer
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb3/explorer/manage-users/
date: '2026-11-10T11:25:45+05:30'
lastmod: '2026-11-10T11:25:45+05:30'
---

* Explorer v1.11+
* InfluxDB 3 Enterprise v3.12+

> [!Important]
> #### How you install Explorer depends on your InfluxDB 3 server
>
> Starting with InfluxDB 3 Enterprise v3.11, Explorer is included with
> the server and runs as WebAssembly (WASM)–there’s no separate
> container to install. Docker is required for InfluxDB 3 Core and
> Enterprise earlier than v3.11, and remains an option for later
> Enterprise releases. See[Install Explorer](/influxdb3/explorer/install/) to find the
> instructions for your server.

Users are accounts that can sign in to InfluxDB 3 Explorer and work with an
InfluxDB 3 Enterprise server based on their assigned roles.
The users that you manage in Explorer are the users of the
InfluxDB 3 Enterprise server.

To manage users, navigate to **Security** \> **Manage Users** in Explorer.

> [!Note]
> Explorer manages users only when the InfluxDB 3 Enterprise server has user
> authentication turned on.
> See[When Explorer requires sign-in](/influxdb3/explorer/authentication/#when-explorer-requires-sign-in).
> If you’re running the[Docker container](/influxdb3/explorer/install/docker/), Explorer must also
> be running in[admin mode](/influxdb3/explorer/install/docker/#choose-operational-mode).

## Authentication methods

Every user signs in with one of the following authentication methods:

* **Password**: The user signs in with a username and password stored in
  InfluxDB 3 Enterprise.
* **SSO**: The user signs in through an OpenID Connect (OIDC) identity
  provider.
  The **OAuth ID** of the user matches the subject (`sub`) that the identity
  provider sends.
* **Both**: The user signs in with either a password or SSO.

An administrator selects the authentication method when[adding a user](/influxdb3/explorer/manage-users/add/).**Password** is selected by default.
You can’t change the authentication method of a user later.

The **Auth method** column on the **Manage Users** page displays **SSO** for
any user with an **OAuth ID**, including a user that also has a password, and**Password** for every other user.

For more information about how users sign in, see[Authentication](/influxdb3/explorer/authentication/).

## User status

Each user has one of the following statuses:

* **Active**: The user can sign in and work in Explorer based on their
  assigned roles.
* **Change required**: The user must change their password the next time they
  sign in.
  See[Require a password change](/influxdb3/explorer/manage-users/update/#require-a-password-change).

## User roles

Roles determine what a user can see and do in Explorer.
A user can have more than one role.
The access of a user is the combination of all roles assigned to the user.

InfluxDB 3 Enterprise provides the following built-in roles:

|   Role    |                      In Explorer, the role can                       |
|-----------|----------------------------------------------------------------------|
| **Admin** |    Use every page and action, including managing users and tokens    |
|**Member** |Query and write data, use dashboards, create databases, and view users|
|**Auditor**|         View databases and users. Can’t query or write data          |

Of the built-in roles, only **Admin** can add, update, or delete users.
For the pages and actions each role allows, see[User roles and access](/influxdb3/explorer/manage-users/roles/).
To assign roles, see[Change the roles of a user](/influxdb3/explorer/manage-users/update/#change-the-roles-of-a-user).

For what each role allows, and for information about custom roles, see[Role-based access control (RBAC)](/influxdb3/enterprise/reference/internals/rbac/)in the InfluxDB 3 Enterprise documentation.

## [Manage your account](/influxdb3/explorer/manage-users/account/)

View your roles, change your password, and sign out of InfluxDB 3 Explorer.

## [Add a user](/influxdb3/explorer/manage-users/add/)

Use InfluxDB 3 Explorer to add a user to an InfluxDB 3 Enterprise server, select how the user signs in, and assign roles.

## [Update users](/influxdb3/explorer/manage-users/update/)

Use InfluxDB 3 Explorer to change the roles of a user, edit a display name, and require a user to change their password.

## [Delete a user](/influxdb3/explorer/manage-users/delete/)

Use InfluxDB 3 Explorer to delete a user from an InfluxDB 3 Enterprise server and immediately revoke the user’s access.

## [User roles and access](/influxdb3/explorer/manage-users/roles/)

Learn which InfluxDB 3 Explorer pages and actions each built-in InfluxDB 3 Enterprise role allows, and what Explorer displays when the server refuses access.

#### Related

* [Authentication](/influxdb3/explorer/authentication/)
* [Manage users and authentication in InfluxDB 3 Enterprise](/influxdb3/enterprise/admin/security/manage-users/)
* [Role-based access control (RBAC) in InfluxDB 3 Enterprise](/influxdb3/enterprise/reference/internals/rbac/)
| Role | In Explorer, the role can |
| --- | --- |
| Role | In Explorer, the role can |
| Admin | Use every page and action, including managing users and tokens |
| Member | Query and write data, use dashboards, create databases, and view users |
| Auditor | View databases and users. Can’t query or write data |