Details

    • Improvement
    • Status: Done
    • Medium
    • Resolution: Fixed
    • None
    • 1.13.0
    • None
    • None
    • Yes
    • Yes
    • Yes

    Description

      Currently when we deploy MongoDB we create two users in the cluster for users:

      clusterAdmin - to manage cluster params
      userAdmin - to manage users

      It would be simpler if we also provide an admin user that can provision databases, collections and perform data modifications out of the box.

      Also we see the same at:

      • cluster control
      • digital ocean managed mongodb
      • atlas

       

      From what I see this user has the following permissions:

      "authenticatedUserRoles" : [
                              {
                                      "role" : "readWriteAnyDatabase",
                                      "db" : "admin"
                              },
                              {
                                      "role" : "readAnyDatabase",
                                      "db" : "admin"
                              },
                              {
                                      "role" : "restore",
                                      "db" : "admin"
                              },
                              {
                                      "role" : "backup",
                                      "db" : "admin"
                              },
                              {
                                      "role" : "dbAdminAnyDatabase",
                                      "db" : "admin"
                              },
                              {
                                      "role" : "clusterMonitor",
                                      "db" : "admin"
                              }
                      ] 

      Attachments

        Issue Links

          Activity

            People

              dmitriy.kostiuk Dmitriy Kostiuk
              sergey.pronin Sergey Pronin
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Smart Checklist