Security, IAM, and Compliance

Showing 109

Return a user createdDate for Atlas control plane and database users

Automated user systems such as Hashi-Vault will automatically create users. Typically these users have a 90day expiration. Any team using continuous delivery hits the atlas user limit. There is not a way to know when an atlas user was created from...

Guest about 2 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

13 VOTE

API Improvements - OpenAPI and more auth options

The API should be documented with OpenAPI to allow better tooling. Ideally using the above OpenAPI spec you could auto generate a SDK or API client for popular languages. Lastly, the API should accept authentication options other than digest. ...

Guest over 5 years ago in Atlas (Control Plane and Data Plane RBAC) 2 Started

4 VOTE

MongoAtlas Orga - Maximum number API keys exceeded

We have detected in our organisation that the limit of API keys has been reached. This is currently affecting our project teams in terms of resource distribution, so we are asking for an increase in the quoter in the short term. Problem: We can't...

Guest over 1 year ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

10 VOTE

Show last activity of user

For managing Database Users, it would be nice to see when that user was last used to authenticate with the cluster - so that we can spot potentially unused accounts and to act as an extra layer of confirmation when deleting accounts that we think ...

Guest over 4 years ago in Atlas (Control Plane and Data Plane RBAC) 4 Submitted

12 VOTE

Via API call invite existing atlas user & assigne them to project & teams

in are organization we want user to have a self serve service that allow them to create project, cluster ,etc ... for now we can only automate half of the process, because we need the web UI to invite user & wait that they approve the invitat...

Guest over 5 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Started

12 VOTE

Improve 2FA and auth management

Right now, there is no way to require Google auth or to require 2FA. The only way to enforce 2FA for a team is to check the team mangagement page. However, since some users may have only used Google auth to login, they will show up in this view as...

Guest over 5 years ago in Atlas (Control Plane and Data Plane RBAC) 6 Submitted

10 VOTE

Ability to invalidate or revoke a X.509 certificate that was not expired.

Currently, X.509 certificates can be issued for authentication and authorization. However, it is not possible to invalidate an already issued certificate. In a situation where the certificate would be compromised, it is therefore not possible to i...

Guest almost 5 years ago in Atlas (Control Plane and Data Plane RBAC) 5 Submitted

3 VOTE

user authentication

Hy It would be extremely useful to be able to create users who can only connect to the database from specific networks or even specific IP addresses, similar to what is possible with MySQL. For example, using the following commands: CREATE USE...

Guest over 1 year ago in Security, IAM, and Compliance 2 Submitted

10 VOTE

User permissions

1. Each Organisation-Member is able to read the billing details of the organisation. This should be restricted. We facing problems with our governance, because each member is able to get details about billing in MongoDB Atlas. 2. As an Project-Own...

Guest over 5 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

1 VOTE

x509 Authentication Supports Multiple CA's

I work for a large entity with a complicated security certificate structure where we are unable to create certs with specific CA's but rather they are issued to us by request and thus we don't always have control over the root or intermediate CA i...

Guest 7 months ago in Security, IAM, and Compliance 0 Submitted

Please enter your email address

FILTER BY CATEGORY