Manage users
Manage users and access to resources in your InfluxDB Cloud Dedicated cluster.
By assigning users to different groups based on the level of access they need, you can minimize unnecessary access and reduce the risk of inadvertent actions. User groups associate access privileges with user attributes–an important part of the Attribute-Based Access Control (ABAC) security model which grants access based on user attributes, resource types, and environment context.
Available user groups
In InfluxDB Cloud Dedicated, users have “management” responsibilities, such as creating and deleting databases, viewing resource information, and provisioning database tokens for reading and writing data.
A user can belong to the following groups, each with predefined privileges:
- Admin: Read and write permissions on all resources.
- Member: Read permission on certain resources and create permission for database tokens; members can’t delete or create databases or management tokens.
- Auditor: Read permission on all resources; auditors can’t modify resources.
Existing users are Admin by default
With the release of user groups for InfluxDB Cloud Dedicated, all existing users in your account are initially assigned to the Admin group, retaining full access to resources in your cluster.
Manage users
Assign a user to a different group
To assign existing users in your account to different groups, contact InfluxData support and provide the list of users and the desired user groups for each.
Invite a user to your account
For new users that you want to add to your account, the InfluxData Support Team configures invitations with the attributes and groups that you specify.
-
Contact InfluxData support to invite a user to your account. In your request, provide the user details, including email address, desired user groups, and other attributes for the user.
-
InfluxData support creates the user account and emails the user an invitation that includes following:
- A login URL to authenticate access to the cluster
- The InfluxDB Cloud Dedicated account ID
- The InfluxDB Cloud Dedicated cluster ID
- The InfluxDB Cloud Dedicated cluster URL
- A password reset email for setting the login password
-
The user accepts the invitation to your account
With a valid password, the user can access cluster resources by interacting with the
influxctl
command line tool.
The assigned user groups determine the user’s access to resources.
Use database tokens to authorize data reads and writes
In InfluxDB Cloud Dedicated, user groups control access for managing cluster resources. Database tokens control access for reading and writing data in cluster databases.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support.