Users in this IdP can choose with the correct approval and authorisation, which roles they would need to assume when they access Mongo DB Atlas projects to perform releases / BAU functions.

To monitor which users are assuming an org owner role, we have configured an OOTB notification to alert when a user changes their role.

However, the notification is limited as it does not say which role a user assumed. Saying which role the user has assumed would make this notification a lot more meaningful and which could then be acted upon.

For example with Org Owner but not limited to this role:

Current:

MongoDB Atlas

🔵 Info: User had their role changed in Organisation Ltd
User had their role changed
first.last@organisation.com
Created: 2024/11/21 12:14 GMT

Suggested:

MongoDB Atlas
APP 12:14
🔵 Info: User had their role changed in Organisation Ltd
User had their role changed to Org Owner
first.last@organisation.com
Created: 2024/11/21 12:14 GMT

This data can then be fed into SOC.