Security, IAM, and Compliance

Add support for custom comment field per API key access list entry

Currently, in the API Access List for an API Key in MongoDB Atlas, there is no way to associate metadata or context with each IP address or CIDR block. This makes it difficult to track the purpose or ownership of each entry, especially in environm...

Oleksandr Shmyrko over 1 year ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

9 VOTE

Allow to define access to DBs/collections by prefix or pattern.

Please extend ACL to support prefixes (or regex) in the database name/collection. Currently only allowed ALL (when empty string provided) or exact db/collection matching when provided. Use case: Several services are using the same cluster but nee...

Guest about 3 years ago in Security, IAM, and Compliance 0 Submitted

17 VOTE

Expose the killOp() action when creating custom roles in Atlas UI

It would be nice to have the `killOp()` action exposed when creating a custom role in Atlas. I also think it would make sense to grant this action to the `atlasAdmin` role, but at a minimum I feel that Project Owners should be able to create a cu...

Chandler Wyatt over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

2 VOTE

Allow to specify principals in resource policies

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We manage the Atlas MongoDB foundation for our company and provide our customers projects where they are free to create th...

Luca Lombardo 9 months ago in IAM 0 Future Consideration

17 VOTE

Allow me to stay logged in for a long period of time

I access Mongo Cloud / Atlas very frequently. However, almost every day I need to re-login using my Google account. It doesn't seem to "remember" my session. I would love if I can extend the default, and let me (and other members) stay logged in f...

Guest over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 4 Submitted

16 VOTE

Allow Atlas User Data Access Permissions to be configured on a per-database/collection basis

Similarly to how database user data access permissions can be configured on a per-database or per-collection basis, it would be ideal if Atlas user data access permissions (as they apply to Data Explorer) could be configured on a more granular bas...

Chandler Wyatt over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Planned

4 VOTE

Maintain database ID/Password profile inside database

Requirement is to maintain database id/passwords with standard details inside database like (Last_login date/ password_change_date) and control of passwords related how many failed_login_attempts/password_life_time/password_complexity/password_loc...

Guest over 1 year ago in Security, IAM, and Compliance 1 Submitted

14 VOTE

Alert setup for failed logins

There is no good monitoring or alert functionality for dealing with potential invalid login attempts. I suggest an alert setup to handle events when known users fail more than 3 times to login (either in Atlas or via driverlogin to db). We have ...

Guest about 6 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

7 VOTE

Support OIDC as Authentication Protocol for access to Mongo Portal

Currently SAML is supported: https://www.mongodb.com/docs/atlas/security/federated-authentication/#configure-federated-authentication It would be preferable if OIDC was supported.

Guest about 3 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

8 VOTE

Associate domains to an IDP at Organization level rather than for entire mongodb.com

At this time domain to IDP associations apply to entire mongodb.com. This makes it very difficult for large companies that have several independent departments to use mongodb.com. Some departments might want to create separate Atlas organizations ...

Guest over 3 years ago in Atlas (Control Plane and Data Plane RBAC) 4 Submitted

Please enter your email address

FILTER BY CATEGORY