Users and roles
The data in Managed Service for MongoDB is handled on behalf of the cluster users. To differentiate user access rights, the role model is used. To assign a user specific access rights for the database, grant them the relevant role in this database.
Database user roles
Standard roles available for any user database.
Database administrator role. Grants all readWrite role rights and the rights needed for database administration:
- planCacheIndexFilter: Lets you use the commands planCacheListFilters, planCacheClearFilters, and planCacheSetFilter.
Cluster administrator roles
Roles needed for cluster monitoring and administration. Those roles are assigned for the privileged MongoDB admin database.
A role for collecting statistics and monitoring. It grants the following rights to the user:
Actions on the cluster as a whole:
Actions on all databases in a cluster:
Actions with all system.profile collections in all databases:
A role for managing cluster sharding. It grants the following rights to the user: