Documentation

InfluxDB Enterprise users

Users

Users have permissions and roles.

Roles

Roles are groups of permissions. A single role can belong to several users.

InfluxDB Enterprise clusters have two built-in roles:

Global Admin

The Global Admin role has all 16 cluster permissions.

Admin

The Admin role has all cluster permissions except for the permissions to:

  • Add/Remove Nodes
  • Copy Shard
  • Manage Shards
  • Rebalance

Permissions

InfluxDB Enterprise clusters have 16 permissions:

Permission Description
View Admin Permission to view or edit admin screens
View Chronograf Permission to use Chronograf tools
Create Databases Permission to create databases
Create Users & Roles Permission to create users and roles
Add/Remove Nodes Permission to add/remove nodes from a cluster
Drop Databases Permission to drop databases
Drop Data Permission to drop measurements and series
Read Permission to read data
Write Permission to write data
Rebalance Permission to rebalance a cluster
Manage Shards Permission to copy and delete shards
Manage Continuous Queries Permission to create, show, and drop continuous queries
Manage Queries Permission to show and kill queries
Manage Subscriptions Permission to show, add, and drop subscriptions
Monitor Permission to show stats and diagnostics
Copy Shard Permission to copy shards

Permission to Statement

The following table describes permissions required to execute the associated database statement.

Permission Statement
CreateDatabasePermission AlterRetentionPolicyStatement, CreateDatabaseStatement, CreateRetentionPolicyStatement, ShowRetentionPoliciesStatement
ManageContinuousQueryPermission CreateContinuousQueryStatement, DropContinuousQueryStatement, ShowContinuousQueriesStatement
ManageSubscriptionPermission CreateSubscriptionStatement, DropSubscriptionStatement, ShowSubscriptionsStatement
CreateUserAndRolePermission CreateUserStatement, DropUserStatement, GrantAdminStatement, GrantStatement, RevokeAdminStatement, RevokeStatement, SetPasswordUserStatement, ShowGrantsForUserStatement, ShowUsersStatement
DropDataPermission DeleteSeriesStatement, DeleteStatement, DropMeasurementStatement, DropSeriesStatement
DropDatabasePermission DropDatabaseStatement, DropRetentionPolicyStatement
ManageShardPermission DropShardStatement,ShowShardGroupsStatement, ShowShardsStatement
ManageQueryPermission KillQueryStatement, ShowQueriesStatement
MonitorPermission ShowDiagnosticsStatement, ShowStatsStatement
ReadDataPermission ShowFieldKeysStatement, ShowMeasurementsStatement, ShowSeriesStatement, ShowTagKeysStatement, ShowTagValuesStatement, ShowRetentionPoliciesStatement
NoPermissions ShowDatabasesStatement
Determined by type of select statement SelectStatement

Statement to Permission

The following table describes database statements and the permissions required to execute them. It also describes whether these permissions apply the the database or cluster level.

Statement Permissions Scope
AlterRetentionPolicyStatement CreateDatabasePermission Database
CreateContinuousQueryStatement ManageContinuousQueryPermission Database
CreateDatabaseStatement CreateDatabasePermission Cluster
CreateRetentionPolicyStatement CreateDatabasePermission Database
CreateSubscriptionStatement ManageSubscriptionPermission Database
CreateUserStatement CreateUserAndRolePermission Database
DeleteSeriesStatement DropDataPermission Database
DeleteStatement DropDataPermission Database
DropContinuousQueryStatement ManageContinuousQueryPermission Database
DropDatabaseStatement DropDatabasePermission Cluster
DropMeasurementStatement DropDataPermission Database
DropRetentionPolicyStatement DropDatabasePermission Database
DropSeriesStatement DropDataPermission Database
DropShardStatement ManageShardPermission Cluster
DropSubscriptionStatement ManageSubscriptionPermission Database
DropUserStatement CreateUserAndRolePermission Database
GrantAdminStatement CreateUserAndRolePermission Database
GrantStatement CreateUserAndRolePermission Database
KillQueryStatement ManageQueryPermission Database
RevokeAdminStatement CreateUserAndRolePermission Database
RevokeStatement CreateUserAndRolePermission Database
SelectStatement Determined by type of select statement n/a
SetPasswordUserStatement CreateUserAndRolePermission Database
ShowContinuousQueriesStatement ManageContinuousQueryPermission Database
ShowDatabasesStatement NoPermissions Cluster The user’s grants determine which databases are returned in the results.
ShowDiagnosticsStatement MonitorPermission Database
ShowFieldKeysStatement ReadDataPermission Database
ShowGrantsForUserStatement CreateUserAndRolePermission Database
ShowMeasurementsStatement ReadDataPermission Database
ShowQueriesStatement ManageQueryPermission Database
ShowRetentionPoliciesStatement CreateDatabasePermission Database
ShowSeriesStatement ReadDataPermission Database
ShowShardGroupsStatement ManageShardPermission Cluster
ShowShardsStatement ManageShardPermission Cluster
ShowStatsStatement MonitorPermission Database
ShowSubscriptionsStatement ManageSubscriptionPermission Database
ShowTagKeysStatement ReadDataPermission Database
ShowTagValuesStatement ReadDataPermission Database
ShowUsersStatement CreateUserAndRolePermission Database

Set your InfluxDB URL

Upgrade to InfluxDB Cloud or InfluxDB 2.0!

InfluxDB Cloud and InfluxDB OSS 2.0 ready for production.