Configure Custom Database Roles

On this page

Create or Update a Custom Database Role

You can create custom roles in Atlas when the built-in roles don't include your desired set of privileges. Atlas applies each database user's custom roles together with:

Any built-in roles you assign when you add a database user or modify a database user.
Any specific privileges you assign when you add a database user or modify a database user.

You can assign multiple custom roles to each database user.

Note

Limitations

Changes to custom roles might take up to 30 seconds to deploy in M0 Free clusters, M2/M5 Shared clusters, Flex clusters, and Serverless instances.

Create or Update a Custom Database Role

To create or update a custom database role, specify the spec.customRoles parameters in the AtlasProject Custom Resource.

Example

cat <<EOF | kubectl apply -f -
apiVersion: atlas.mongodb.com/v1
kind: AtlasProject
metadata:
  name: my-project
spec:
  name: Test Atlas Operator Project
  connectionSecretRef:
    name: my-atlas-key
  customRoles:
    - name: "my-role"
      actions:
        - name: "my-action"
          resources:
            - cluster: false
              collection: "my-collection"
              database: "my-database"
      inheritedRoles:
        - name: "clusterMonitor"
          database: "my-database"
EOF

To learn more about the configuration parameters available from the API, see the Atlas Custom Database Roles API.

Back

Cloud Provider Integrations

X.509