Security, IAM, and Compliance

Improve 2FA and auth management

Right now, there is no way to require Google auth or to require 2FA. The only way to enforce 2FA for a team is to check the team mangagement page. However, since some users may have only used Google auth to login, they will show up in this view as...

Guest over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 6 Submitted

10 VOTE

Ability to invalidate or revoke a X.509 certificate that was not expired.

Currently, X.509 certificates can be issued for authentication and authorization. However, it is not possible to invalidate an already issued certificate. In a situation where the certificate would be compromised, it is therefore not possible to i...

Geoffrey Céré almost 6 years ago in Atlas (Control Plane and Data Plane RBAC) 5 Submitted

5 VOTE

Return a user createdDate for Atlas control plane and database users

Automated user systems such as Hashi-Vault will automatically create users. Typically these users have a 90day expiration. Any team using continuous delivery hits the atlas user limit. There is not a way to know when an atlas user was created from...

Guest almost 3 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

4 VOTE

MongoAtlas Orga - Maximum number API keys exceeded

We have detected in our organisation that the limit of API keys has been reached. This is currently affecting our project teams in terms of resource distribution, so we are asking for an increase in the quoter in the short term. Problem: We can't...

Guest over 2 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

10 VOTE

User permissions

1. Each Organisation-Member is able to read the billing details of the organisation. This should be restricted. We facing problems with our governance, because each member is able to get details about billing in MongoDB Atlas. 2. As an Project-Own...

Guest over 6 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

1 VOTE

Every time, i want to see data, i need to signin. May be because of security concerns, you do this. But it will be better if i signin once and then no need to signin again

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. What would you like to see happen? Describe the desired outcome or enhancement. Why is this important to yo...

swayam alhat 8 months ago in IAM 0 Future Consideration

2 VOTE

Decouple "insert" privilege from implicit collection creation

MongoDB currently allows a user with the insert privilege on a database to implicitly create a new collection by inserting into it — even if the user lacks the createCollection privilege. This behavior makes it difficult to enforce strict access c...

Guest over 1 year ago in Security, IAM, and Compliance 0 Submitted

1 VOTE

New free tier account won’t go past 2 completed MFA

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. New account - a lot of timeouts to set up MFA - Authenticator, and even when finally set up it won’t allow me go further t...

Kemi Olatoke 9 months ago in Account Protection 1 Future Consideration

9 VOTE

Ability to change First and Last Name

It would be good if users are able to modify their First and Last Name after account creation.

Guest almost 7 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Planned

1 VOTE

Temporary change access rights

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We want to make sure the user priviliges dont stay at a raised level. We currently have readonly accounts, and then specif...

Tonny Vildevall 10 months ago in IAM 1 Will Not Implement

Please enter your email address

FILTER BY CATEGORY