How To

  1. User dengan Read-Only akses ke semua database
use admin
db.createUser({
  user: "readOnlyUser",
  pwd: "password123",
  roles: [{ role: "readAnyDatabase", db: "admin" }]
})
  1. User dengan Superuser/Root akses
use admin
db.createUser({
  user: "superUser",
  pwd: "superpassword123",
  roles: [{ role: "root", db: "admin" }]
})
  1. User dengan akses Read-Only ke satu database
use yourDatabase
db.createUser({
  user: "readOnlyOneDbUser",
  pwd: "password123",
  roles: [{ role: "read", db: "yourDatabase" }]
})
  1. User dengan akses Read-Write ke satu database
use yourDatabase
db.createUser({
  user: "readWriteUser",
  pwd: "password123",
  roles: [{ role: "readWrite", db: "yourDatabase" }]
})
  1. Drop/hapus user
use admin
db.dropUser("username")
  1. Ganti password
use admin
db.updateUser("username", {
  pwd: "newpassword123"
})
  1. Mengganti privileges user
use admin
db.updateUser("username", {
  roles: [{ role: "read", db: "admin" }]
})

Catatan:

  1. di MongoDB tidak bisa mengatur akses user by IP, di sini kamu bisa setting di bindIP mongod.conf atau di settingan firewall