Pavel ← MongoDB Feedback Engine My feedback 3 results found Restrict specific users or client IPs to only Analytics node(s) 23 votes Vote Vote Vote We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close Vote We’ll send you updates on this idea 3 comments · Atlas » Other · Delete… · Admin → How important is this to you? Not at all You must login first! Important You must login first! Critical You must login first! We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close An error occurred while saving the comment Pavel commented · Feb 17, 2022 · Edit… · Delete… I also think it is imperative to restrict access at the network level to a read-only replica! So that certain users from certain addresses do not have access to the entire cluster, but only to a read-only replica. Save Submitting... Pavel supported this idea · Feb 17, 2022 Granular Permissions 456 votes Vote Vote Vote We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close Vote We’ll send you updates on this idea started · 57 comments · Atlas » IAM · Delete… · Admin → How important is this to you? Not at all You must login first! Important You must login first! Critical You must login first! We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close Pavel supported this idea · Feb 8, 2022 Separate access control for read-only replicas 3 votes Vote Vote Vote We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close Vote We’ll send you updates on this idea 1 comment · Atlas » IAM · Delete… · Admin → How important is this to you? Not at all You must login first! Important You must login first! Critical You must login first! We're glad you're herePlease sign in to leave feedback Signed in as (Sign out) Close Close Pavel shared this idea · Feb 8, 2022
I also think it is imperative to restrict access at the network level to a read-only replica! So that certain users from certain addresses do not have access to the entire cluster, but only to a read-only replica.