Creating users and roles in MongoDB - Quick Revision & Summary

Recall & Review

beginner

What is the purpose of creating users in MongoDB?

Users in MongoDB are created to control who can access the database and what actions they can perform. This helps keep data safe and organized.

beginner

What is a role in MongoDB?

A role is a set of permissions that define what actions a user can do in the database, like reading data or writing data.

intermediate

How do you create a user with read-only access to a database in MongoDB?

You use the command db.createUser() with the role 'read' on the specific database. For example: <br>db.createUser({user: 'reader', pwd: 'password', roles: [{role: 'read', db: 'mydb'}]})

intermediate

What command is used to create a custom role in MongoDB?

Use db.createRole() with a role name and a list of privileges. For example: <br>db.createRole({role: 'myRole', privileges: [{resource: {db: 'mydb', collection: ''}, actions: ['find']}], roles: []})

beginner

Why is it important to assign roles instead of giving all privileges to a user?

Assigning specific roles limits what a user can do, which improves security by preventing accidental or malicious changes to the database.

Which MongoDB command is used to add a new user?

A db.insertUser()

B db.createUser()

C db.addUser()

D db.newUser()

The correct command to create a user in MongoDB is db.createUser().

What does a role in MongoDB define?

A The user's password

B The user's email

C The user's permissions

D The user's database name

A role defines the permissions or actions a user can perform in the database.

Which role would you assign to a user who should only read data?

A root

B dbAdmin

C readWrite

D read

The 'read' role allows a user to only read data without making changes.

What is the purpose of db.createRole()?

A To create a custom role with specific privileges

B To create a new user

C To create a new database

D To delete a role

db.createRole() is used to create a custom role with specific permissions.

Why should you avoid giving users the 'root' role unless necessary?

A It gives full access which can be risky

B It only allows reading data

C It disables their account

D It limits their access

The 'root' role gives full access to the database, which can be risky if misused.

Explain how to create a user with read and write access to a specific database in MongoDB.

Think about the command and the role that allows both reading and writing.

Describe the steps to create a custom role that allows only reading from a specific collection.

Focus on defining privileges and then assigning the role.