Security, IAM, and Compliance

Mongo Atlas user roles separation

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We encountered the problem of granular Mongo Atlas or Сompass access control to projects. The existing roles are not enoug...

khadzhynov.m@ajax.systems khadzhynov.m@ajax.systems 10 months ago in Atlas (Control Plane and Data Plane RBAC) 4 Started

20 VOTE

API Key Expiration date

We have a security reqirement that secrets must expire after 2 years. Therefore it would be awesome if MongoDB Atlas API Keys would support an expiration date. Somethig similar exists for the IP Whitelisting. Here we have the option to remove IP...

Guest over 5 years ago in Atlas (Control Plane and Data Plane RBAC) 8 Started

23 VOTE

Migrate users and roles with cluster data

It would be great to be able to transfer users with their credentials and permissions from our on-premises deployment to Atlas during migration to avoid having to recreate those users using the Atlas interface or API.

Guest over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 3 Submitted

12 VOTE

Backup for project user

Hello, it would be good if we could better granulate which users have access to cloud backups. Currently only a project user with Project Owner rights can perform backups, restores etc. It would be really cool if some users, such as developers...

Guest over 3 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

9 VOTE

A new role for security auditing purposes

Currently MongoDB Atlas provides two read only roles at project level ("Project Read Only", and " Project Data Access Read Only"). "Project Data Access Read Only" seems to allow access to the data also, while "Project Read Only" role does not all...

Guest almost 3 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

2 VOTE

Allow to specify principals in resource policies

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We manage the Atlas MongoDB foundation for our company and provide our customers projects where they are free to create th...

Luca Lombardo 8 months ago in IAM 0 Future Consideration

4 VOTE

Add support for custom comment field per API key access list entry

Currently, in the API Access List for an API Key in MongoDB Atlas, there is no way to associate metadata or context with each IP address or CIDR block. This makes it difficult to track the purpose or ownership of each entry, especially in environm...

Oleksandr Shmyrko over 1 year ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

1 VOTE

Exposing `querySettings` as an action for Atlas custom roles

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. atlasAdmin is the only role that grants querySettings, which forces apps that need persistent query settings to run with f...

Crystal Hsing 4 months ago in Atlas (Control Plane and Data Plane RBAC) 0 Future Consideration

9 VOTE

Allow to define access to DBs/collections by prefix or pattern.

Please extend ACL to support prefixes (or regex) in the database name/collection. Currently only allowed ALL (when empty string provided) or exact db/collection matching when provided. Use case: Several services are using the same cluster but nee...

Guest about 3 years ago in Security, IAM, and Compliance 0 Submitted

17 VOTE

Expose the killOp() action when creating custom roles in Atlas UI

It would be nice to have the `killOp()` action exposed when creating a custom role in Atlas. I also think it would make sense to grant this action to the `atlasAdmin` role, but at a minimum I feel that Project Owners should be able to create a cu...

Chandler Wyatt about 6 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

Please enter your email address

FILTER BY CATEGORY