Yandex.Cloud
  • Services
  • Why Yandex.Cloud
  • Pricing
  • Documentation
  • Contact us
Get started
Yandex Managed Service for MongoDB
  • Getting started
  • Step-by-step instructions
    • All instructions
    • Information about existing clusters
    • Creating clusters
    • Database migration to Yandex.Cloud
    • Connecting to databases
    • Stop and start the cluster
    • Changing cluster and database settings
    • MongoDB version upgrade
    • Database management
    • Managing hosts in a cluster
    • Managing database users
    • Managing backups
    • How to manage shards
    • Deleting clusters
  • Solutions
    • Sharding collections
  • Concepts
    • Relationship between service resources
    • Host classes
    • Network in Yandex Managed Service for MongoDB
    • Quotas and limits
    • Storage types
    • Backups
    • Replication
    • Sharding
    • Users and roles
    • Supported clients
  • Access management
  • Pricing policy
    • Current pricing policy
    • Archive
      • Before January 1, 2019
      • From January 1 to March 1, 2019
      • From March 1, 2019 to February 1, 2020
  • API reference
    • Authentication in the API
    • gRPC
      • Обзор
      • BackupService
      • ClusterService
      • DatabaseService
      • ResourcePresetService
      • UserService
      • OperationService
    • REST
      • Overview
      • Backup
        • Overview
        • get
        • list
      • Cluster
        • Overview
        • addHosts
        • addShard
        • backup
        • create
        • delete
        • deleteHosts
        • deleteShard
        • enableSharding
        • get
        • getShard
        • list
        • listBackups
        • listHosts
        • listLogs
        • listOperations
        • listShards
        • move
        • rescheduleMaintenance
        • resetupHosts
        • restartHosts
        • restore
        • start
        • stop
        • streamLogs
        • update
      • Database
        • Overview
        • create
        • delete
        • get
        • list
      • ResourcePreset
        • Overview
        • get
        • list
      • User
        • Overview
        • create
        • delete
        • get
        • grantPermission
        • list
        • revokePermission
        • update
      • Operation
        • Overview
        • get
  • Questions and answers
    • General questions
    • Questions about MongoDB
    • All questions on the same page
  1. Concepts
  2. Users and roles

Users and roles

  • Database user roles
    • read
    • readWrite
  • Cluster administrator roles
    • mdbMonitor
    • mdbShardingManager

The data in Managed Service for MongoDB is handled on behalf of the cluster users. To differentiate user access rights, the role model is used. To assign a user specific access rights for the database, grant them the relevant role in this database.

Database user roles

Standard roles available for any user database.

read

Users granted the read role have read access to all non-system database collections and the system.js collection. Learn more about this role in the MongoDB documentation.

readWrite

Users granted the readWrite role have read and write access to all non-system database collections and the system.js collection. Learn more about this role in the MongoDB documentation.

Cluster administrator roles

Roles needed for cluster monitoring and administration. Those roles are assigned for the privileged MongoDB admin database.

mdbMonitor

A role for collecting statistics and monitoring. It grants the following rights to the user:

  • Actions on the cluster as a whole:

    • connPoolStats
    • getLog
    • getParameter
    • getShardMap
    • hostInfo
    • inprog
    • listDatabases
    • listSessions
    • listShards
    • netstat
    • replSetGetConfig
    • replSetGetStatus
    • serverStatus
    • shardingState
    • top
  • Actions on all databases in a cluster:

    • collStats
    • dbStats
    • getShardVersion
    • indexStats
    • useUUID
  • Actions with all system.profile collections in all databases:

    • find
  • Actions with system.indexes, system.js, and system.namespaces collections of the local and config databases:

    • collStats
    • dbHash
    • dbStats
    • find
    • killCursors
    • listCollections
    • listIndexes
    • planCacheRead

mdbShardingManager

A role for managing cluster sharding. It grants the following rights to the user:

  • Actions with the admin database:

    • viewRole
  • Actions with any resource in the cluster:

    • enableSharding
    • flushRouterConfig
    • getShardVersion
    • getShardMap
    • shardingState
    • moveChunk
    • splitChunk
    • splitVector
  • Actions with the config database:

    • find
In this article:
  • Database user roles
  • read
  • readWrite
  • Cluster administrator roles
  • mdbMonitor
  • mdbShardingManager
Language
Careers
Privacy policy
Terms of use
© 2021 Yandex.Cloud LLC