I could not find any specification for the minimal roles/privileges required for the users Ops Manager uses when connecting to a blockstore or the application DB. I would have expected it to be under one of the following sections:

• https://docs.opsmanager.mongodb.com/current/tutorial/prepare-backing-mongodb-instances/
• https://docs.opsmanager.mongodb.com/current/tutorial/nav/security-enable-authentication/

I think specifying this is important to stay compliant with "Principle of least privilege", since I am afraid most of them are having users with too many privileges.

Thanks,
Pavel