Database Security Overview

• How do you enable authentication?

  .
  
  

  • Authentication is disabled by default
  • Configure the mongod.conf file
  • Set the auth mongod.conf setting to "true"
  • For replica set security: set the keyFile setting

• How do you use auth setting?

  .
  
  

  • Set the auth mongod.conf param to true
  • Restart mongod
  • If no users are in the admin database, localhost access is allowed

• What are the user privilege roles?

  .
  
  

  • What a user can do with the database
  • read, readWrite

• What are the database admin roles?

  .
  
  

  • How a user can manage the database, users, or cluster
  • dbAdmin, userAdmin, clusterAdmin

• What are the "Any" privileges?

  .
  
  

  • [read|readWrite|userAdmin|dbAdmin]AnyDatabase