In the context of supporting user-defined roles (SERVER-8580), we should review and as needed extend the existing system-defined roles to ensure that they support the most common access control use cases.
System defined roles will automatically be created for each database, and it will not be possible to rename, replace, update, modify or delete them. They should be useful for basic single- and multi-tenant scenarios.
- is depended on by
-
SERVER-11027 not authorized to execute repairDatabase for user with role clusterAdmin
-
- Closed
-
- is related to
-
SERVER-9815 Introduce a role for monitoring cluster members
-
- Closed
-
-
SERVER-10750 Minimum roles required to run mongorestore with authentication
-
- Closed
-
- related to
-
-
- Closed
-
-
SERVER-10493 Update tools to support backing up and restoring user data properly with new user format 2.6
-
- Closed
-
-
-
- Closed
-