Summary

In mongo_orchestration/common.py, mongo-orchestration currently grants users the following roles on the admin database:

• userAdminAnyDatabase
• clusterAdmin
• dbAdminAnyDatabase
• readWriteAnyDatabase

This omits the "restore" and "backup" roles, the former of which is required to drop non-system collections in the "local" database. This is responsible for at least one test failure in the PHP driver (PHPC-2008).

Motivation

Who is the affected end user?

Drivers.

How does this affect the end user?

Unexpected test failure, which likely cannot be addressed with changes to an MO configuration file alone.

How likely is it that this problem or use case will occur?

Very likely if a driver test suite is working with the "local" database.

If the problem does occur, what are the consequences and how severe are they?

Failed tests.

Is this issue urgent?

Somewhat.

Is this ticket required by a downstream team?

Needed by PHPC.

Is this ticket only for tests?

Yes.