Role-based access control in MongoDB - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Role-based Access Control (RBAC) in MongoDB?

RBAC is a way to manage who can do what in MongoDB by assigning roles to users. Each role has specific permissions that control access to database actions.

intermediate

How do you create a custom role in MongoDB?

Use the db.createRole() command with a role name, privileges (actions on resources), and optionally inherited roles.

beginner

What is the difference between a built-in role and a custom role in MongoDB?

Built-in roles come predefined with MongoDB and cover common permissions. Custom roles are created by users to tailor permissions for specific needs.

beginner

Which MongoDB command assigns a role to a user?

The db.grantRolesToUser() command assigns one or more roles to an existing user.

beginner

Why is it important to follow the principle of least privilege in RBAC?

It limits users to only the permissions they need, reducing the risk of accidental or malicious data access or changes.

Which command creates a new role in MongoDB?

A db.createRole()

B db.createUser()

C db.grantRolesToUser()

D db.addRole()

Use db.createRole() to define a new role with specific privileges.

What does a role in MongoDB define?

A A set of permissions

B A collection

C A database

D A set of users

A role defines permissions that control what actions a user can perform.

Which command assigns roles to an existing user?

A db.createUser()

B db.grantRolesToUser()

C db.createRole()

D db.addUserRole()

db.grantRolesToUser() is used to assign roles to users.

What is the principle of least privilege?

A Users get all permissions

B Users get no permissions

C Users share permissions

D Users get only permissions they need

It means users should have only the permissions necessary to do their job.

Which of these is NOT a built-in MongoDB role?

A readWrite

B dbAdmin

C superUser

D read

There is no built-in role named superUser in MongoDB.

Explain how role-based access control works in MongoDB and why it is useful.

Think about how you give keys to rooms only to people who need them.

Describe the steps to create a custom role and assign it to a user in MongoDB.

First create the role, then give it to the user.