content/shared/influxdb-v2/admin/tokens/view-tokens.md
View API tokens and permissions using the InfluxDB user interface (UI),
the influx command line interface (CLI), or the InfluxDB API.
{{% note %}}
{{% show-in "v2" %}}Tokens are visible to the user who created the token. Users who own a token with operator permissions also have access to all tokens. Tokens stop working when the user who created the token is deleted.
In the InfluxDB UI, full tokens are only visible immediately after the token is created.
We recommend creating a generic user to create and manage tokens for writing data. {{% /show-in %}}
{{% show-in "cloud,cloud-serverless" %}} To follow best practices for secure API token generation and retrieval, InfluxDB Cloud enforces access restrictions on API tokens.
We recommend the following for managing your tokens:
{{% show-in "v2" %}}
{{< nav-icon "load-data" >}}
{{% /show-in %}}
{{% show-in "cloud,cloud-serverless" %}}
{{< nav-icon "load-data" >}}
{{% /show-in %}}
Use the influx auth list command
to view tokens.
influx auth list
Filtering options such as filtering by authorization ID, username, or user ID are available.
See the influx auth list documentation
for information about other available flags.
Use the /api/v2/authorizations InfluxDB API endpoint to view tokens and permissions.
{{< api-endpoint method="GET" endpoint="/api/v2/authorizations" api-ref="/influxdb/version/api/#operation/GetAuthorizations" >}}
Include the following in your request:
| Requirement | Include by |
|---|---|
API token with the read: authorizations permission | Use the Authorization: Token YOUR_API_TOKEN header. |
{{% get-shared-text "api/v2.0/auth/oss/tokens-view.sh" %}}
To view a specific authorization and token, include the authorization ID in the URL path.
{{% api-endpoint method="GET" endpoint="/api/v2/authorizations/{authID}" api-ref="/influxdb/version/api/#operation/GetAuthorizationsID" %}}
InfluxDB returns authorizations from the same organization as the token used in the request.
To filter tokens by user, include userID as a query parameter in your request.
{{% get-shared-text "api/v2.0/auth/oss/tokens-view-filter.sh" %}}
{{% show-in "v2" %}}
Operator tokens have access to all organizations' authorizations.
To filter authorizations by organization when using an operator token, include an org or orgID query parameter in your request.
{{% /show-in %}}
See the /authorizations endpoint documentation for more information about available parameters.