Database Users
MongoDB uses database users to authenticate clients and grant varying levels of access to your deployment. You can assign roles to database users based on the required level of access and specific tasks they need to perform.
Use Cases
For example, you can create database users to:
Allow reads and writes to the database but restrict administrative access.
Assign administrative privileges to manage the database, perform backups, and configure settings.
Grant read-only access for reporting and analytics purposes.
Behavior
Database users and their permissions are governed by the roles that are assigned to them. You can use MongoDB's built-in roles or create custom roles.
Database Users in Self-Managed Deployments
You can grant database users in self-managed deployments one or more roles. Roles grant users privileges to perform actions on specified resources. Users can perform actions on the following resources:
Collections
Databases
Clusters
For more information, see Built-In Roles.
To create and manage users in your self-managed deployment, use the
createUser command or the db.createUser() method.
Database Users in MongoDB Atlas
Database users in MongoDB Atlas have different built-in roles than self-managed deployments. When you create a database user in MongoDB Atlas, Atlas built-in roles apply to all databases in your project. To learn more, see Altas Built-In Roles and Privileges.
Note
Database users are separate from Atlas users. Database users have access to MongoDB databases, while Atlas users have access to the Atlas application itself.
You can create database users, assign built-in roles, and create custom roles in the Atlas UI. To learn more, see Configure Database Users on Atlas.