Data Management:Manage user permissions on MongoDB databases

Create a user

1. Log on to the DMS console V5.0.

2. Log on to the MongoDB database. For more information, see Log on to a database instance.

   Important

   If your database instance is a MongoDB replica set instance, log on to the primary node of the instance.

3. In the left-side navigation pane of the DMS console, right-click the instance that you want to manage and select Account Management.
   Note If you log on to the DMS console in simple mode, click Database instance in the left-side navigation pane. In the instance list that appears, right-click the instance that you want to manage and select Account Management.

4. On the Account Management page, select the database that you want to manage from the drop-down list.

5. Click Create User in the upper-left corner.

6. In the Create User dialog box, perform the following steps.

   

   1. Configure user information.

      Parameter	Description
      Target Database	The database for which you want to create a user. Note If you do not set the Target Database parameter to admin, the user to be created is a regular user. If you set the Target Database parameter to admin, the user to be created is a privileged user.
      User name	The name of the user. The name cannot contain Chinese characters. The name can contain letters, digits, and special characters. The name can contain the following special characters: ! # $ % ^ & * ( ) _ + - =
      Password	The password that the user can use to log on to the database. To ensure data security, we recommend that you set a password that is 8 to 32 characters in length and consists of at least three types of the following characters: Uppercase letters Lowercase letters Digits Special characters: ! # $ % ^ & * ( ) _ + - =
      Confirm Password	Enter the password again to confirm the password.

   2. Grant permissions to the user.

      Note

      • If you set the Target Database parameter to admin:

        On the Current library permissions tab, you can grant the permissions of different roles to the user. The roles include Common operation role, Administrator action role, Instance-level role, Cluster administrator role, Backup and Recovery roles, and Super role. For more information, see the Permissions of different roles section of this topic.

        On the Other library permissions tab, you can grant permissions on other databases in the instance to the user.

      • If you do not set the Target Database parameter to admin:

        On the Current library permissions tab, you can grant the permissions of only Common operation role and Administrator action role to the user. For more information, see the Permissions of different roles section of this topic.

        You cannot grant permissions on other databases to the user on the Other library permissions tab.

7. Click Confirm.

   Note

   SQL statements can be generated based on the parameters that you configure. If the database instance is managed in Security Collaboration mode, the SQL statements may fail to be executed due to security rules. In this case, you can perform operations as prompted or contact a database administrator (DBA) or DMS administrator.

Modify or delete a user

1. Log on to the DMS console V5.0.
2. In the left-side navigation pane of the DMS console, right-click the instance that you want to manage and select Account Management.
   Note If you log on to the DMS console in simple mode, click Database instance in the left-side navigation pane. In the instance list that appears, right-click the instance that you want to manage and select Account Management.

3. On the Account Management page, select the database that you want to manage from the drop-down list.

4. On the Account Management page, find the user that you want to manage and click Edit in the Operation column to modify the information about the user, or click Delete in the Operation column to delete the user.

Permissions of different roles

The following table describes the permissions of different roles. For more information, visit the MongoDB official website.