Creating users and roles in MongoDB - Try It Yourself

Creating users and roles

📖 Scenario: You are setting up a MongoDB database for a small company. You need to create users with specific roles to control access to the database.

🎯 Goal: Learn how to create users and assign roles in MongoDB to manage database access securely.

📋 What You'll Learn

Create a user with read-only access to a database

Create a user with readWrite access to a database

Create a custom role with specific privileges

Assign the custom role to a new user

💡 Why This Matters

🌍 Real World

In real companies, controlling who can read or write data is important for security and data integrity.

💼 Career

Database administrators and backend developers often create users and roles to manage access in production databases.

1

Create a read-only user

Use the db.createUser() method to create a user called readonlyUser with password readonlyPass123 who has the read role on the companyDB database.

MongoDB

# Use db.createUser() to create readonlyUser with read role on companyDB
# Your code here

Need a hint?

Remember to specify the user name, password, and roles array with the correct role and database.

2

Create a readWrite user

Create a user called writerUser with password writePass456 who has the readWrite role on the companyDB database using db.createUser().

MongoDB

db.createUser({
  user: "readonlyUser",
  pwd: "readonlyPass123",
  roles: [ { role: "read", db: "companyDB" } ]
})

# Create writerUser with readWrite role on companyDB
# Your code here

Need a hint?

Use the same method as before but change the user name, password, and role to readWrite.

3

Create a custom role

Use db.createRole() to create a role called customReporter on the companyDB database. This role should have the privilege to find documents on the reports collection.

MongoDB

db.createUser({
  user: "readonlyUser",
  pwd: "readonlyPass123",
  roles: [ { role: "read", db: "companyDB" } ]
})

db.createUser({
  user: "writerUser",
  pwd: "writePass456",
  roles: [ { role: "readWrite", db: "companyDB" } ]
})

# Create customReporter role with find privilege on reports collection
# Your code here

Need a hint?

Define the role name, privileges with resource and actions, and an empty roles array.

4

Assign the custom role to a new user

Create a user called reportUser with password reportPass789 who has the customReporter role on the companyDB database using db.createUser().

MongoDB

db.createUser({
  user: "readonlyUser",
  pwd: "readonlyPass123",
  roles: [ { role: "read", db: "companyDB" } ]
})

db.createUser({
  user: "writerUser",
  pwd: "writePass456",
  roles: [ { role: "readWrite", db: "companyDB" } ]
})

db.createRole({
  role: "customReporter",
  privileges: [
    {
      resource: { db: "companyDB", collection: "reports" },
      actions: [ "find" ]
    }
  ],
  roles: []
})

# Create reportUser with customReporter role on companyDB
# Your code here

Need a hint?

Use db.createUser with the new user name, password, and assign the customReporter role.