[DOCS-11495] The permission of Migrate with MongoMirror is a little ambiguous. Created: 27/Mar/18 Updated: 21/Jun/18 Resolved: 21/Jun/18 |
|
| Status: | Closed |
| Project: | Documentation |
| Component/s: | mongomirror |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Minor - P4 |
| Reporter: | Dawid Esterhuizen | Assignee: | Ravind Kumar (Inactive) |
| Resolution: | Done | Votes: | 3 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Participants: | |
| Days since reply: | 5 years, 33 weeks, 6 days ago |
| Description |
|
While at a customer we followed the steps as described in the "Migrate with MongoMirror" page: https://docs.atlas.mongodb.com/import/mongomirror/#set-up-mongodb-user-in-the-target-service-cluster In step 2 Setup MongoDB user in the target Atlas cluster the discription is ambiguous, and can lead to a migration to fail. "To run mongomirror, you must specify a MongoDB user that has readWriteAnyDatabase and dbAdminAnyDatabase privileges in the Atlas cluster. For example, a user with Atlas admin role provides these privileges." The above state that you only need readWriteAnyDatabase and dbAdminAnyDatabase. When you only have there you cannot apply the oplog to the destination, and the migration fail before writing a token to be able to continue, this could be a time sink, as the initial sync has to be restarted. According to the mongoMirror reference documents it states Atlas Admin role has the appropriate privilages: (https://docs.atlas.mongodb.com/reference/mongomirror/#destination-authorization) I suggest changing the wording in the "Migrate with MongoMirror" to the following to avoid confusion: "To run mongomirror, you must specify a MongoDB user Atlas admin role." |
| Comments |
| Comment by Ravind Kumar (Inactive) [ 21/Jun/18 ] |
|
merged and published |