Role-based access control (RBAC)
RBAC is part of the user authentication preview
Role-based access control applies to the multi-user authentication preview,
which is off by default in InfluxDB 3 Enterprise. Existing apiv3_
token workflows are unaffected. See
Manage users and authentication
to enable the preview.
Role-based access control (RBAC) governs what authenticated users can do in InfluxDB 3 Enterprise. Each user is assigned one or more built-in roles that determine their permissions.
Built-in roles
InfluxDB 3 Enterprise provides three built-in roles:
- Admin
- Auditor
- Member
Role permissions are limited in this preview
Role-based permissions are limited and still being finalized. Only the Admin role (or an admin token) currently has full access. The Auditor and Member roles grant less access than their names suggest. Use an admin token for user and role management.
Assign roles
Assign roles to a user with the influxdb3 update user-roles command. See
Manage users and authentication
for the user-management workflow.
Limitations
RBAC has the following known limitations in InfluxDB 3 Enterprise:
- Token scope can exceed role scope: A non-admin user can currently create tokens with broader permissions than their assigned role.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Enterprise and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support. Customers using a trial license can email trial@influxdata.com for assistance.