Request that API keys restrict data to a measurement

InfluxDB 3
,
1

We have data for multiple customers in our InfluxDB. Grafana is our viewer of choice. Grafana uses an API key. We’d like to ensure that a connection from Grafana can only read a certain measurement within our bucket. We have years of data in the bucket and it’s intentional that we have all customers in the same bucket (to compare machine performance) so we can’t have them in different buckets.

Therefore…
Can we propose that API keys enable a restriction to a measurement or even to finer detail than that (e.g. specifying certain tags are readable)

2

Are you using InfluxDB3 on the cloud or OSS or Enterprise? Different products have different levels or security tokens and I can share your request with the right person if I know which product you’re using.

3

Well I’m actually using InfluxDB 2.0 on the cloud.
But we have an org in our infrastructure that is InfluxDB 3.0 on the cloud

Thanks Suyash

4

You’re welcome to submit your request via GitHub issue GitHub · Where software is built

5

Hi Suyash, I can’t tell if this is a response to my query. You have replied but your reply only contains my own question. Can you clarify?

6

Hi @asmith yes, my reply to submitting the GitHub was for your suggestion as we don’t have that feature right now ‘Can we propose that API keys enable a restriction to a measurement or even to finer detail than that (e.g. specifying certain tags are readable)’. Hope that helps.

7

Let’s start again …

Two years ago I noted that the feature is not available.

So I asked for API keys to enable a restriction to a measurement

You are responding “we don’t have that feature right now”

But I already knew that ….that’s why I was requesting it.

So what’s the response to my request please

:blush:

Andrew

8

Hi Andrew, to clarify, if you need measurement level access control, this isn’t currently possible (only bucker/database level is possible right now), consider filing a GitHub issue to request this feature and engineering team would respond there. You can create Grafana dashboard queries to only display the data you want, however users with access to the data source could still query other data in the bucket if they have permission. Hope that clarifies.