Atlas User Roles
Atlas user roles define the actions Atlas users can perform in
organizations, projects, or both. Organization and project Owners
can manage Atlas users and their roles within their respective
organizations and projects.
Organization Roles
| Organization Role |
Decription |
|---|
-
Organization Owner
|
Grants root access to the organization, including:
Project Owner access to all projects in
the organization, even if added to a project with a
non-Owner role.- Privileges to administer organization settings.
- Privileges to add/remove/edit users to the organization.
- Privileges to delete the organization.
- All the privileges granted by the other organization roles
combined.
|
-
Organization Project Creator
|
Grants the following access:
- Privileges to create projects in the organization.
- Privileges granted by the
Organization Member role.
|
-
Organization Billing Admin
|
Grants the following access:
- Privileges to administer billing information for the organization.
- Privileges granted by the
Organization Member role.
|
-
Organization Read Only
|
Provides read-only access to everything in the organization,
including all projects in the organization.
For an Organization Member, within a project, the
user has the privileges as determined by the user’s
project role. If a user’s project role is
Project Owner, then the user can
add a new user to the project, which results in adding the
newly-added user to the organization as well (if the newly added
user is not already in the organization).
|
-
Organization Member
|
Provides read-only access to the organization (settings, users,
and billing) and the projects to which they belong.
For an Organization Member, within a project, the
user has the privileges as determined by the user’s
project role. If a user’s project role is
Project Owner, then the user can
add a new user to the project, which results in adding the
newly-added user to the organization as well (if the newly added
user is not already in the organization).
|
Project Roles
The following roles grant privileges within a project.
| Project Role |
Decription |
|---|
-
Project Owner
|
Provides full project administration access.
A user with Organization Owner role has
Project Owner access for all projects in the organization,
even if added to a project with a Read Only role.
|
-
Project Cluster Manager
|
A user with the Project Cluster Manager role can perform the
following tasks:
- Edit Atlas clusters.
- Pause and resume Atlas clusters.
|
-
Project Data Access Admin
|
Grants access to Data Explorer;
specifically, the privileges to perform the following through
Data Explorer:
- View, create, and drop databases, collections, and indexes.
- View, modify, and delete documents.
This role also grants privileges of Project Read
Only as well as privileges to view the sample query field
values in the Performance Advisor.
The Project Data Access Admin role does not grant privileges
to initiate backup or restore jobs.
|
-
Project Data Access Read/Write
|
Grants access to Data Explorer;
specifically, the privileges to perform the following through
Data Explorer:
- View and create databases and collections.
- View, modify, and delete documents.
- View indexes.
This role also grants privileges to view the sample query field
values in the Performance Advisor.
|
-
Project Data Access Read Only
|
Grants access to Data Explorer;
specifically, the privileges to view databases, collections, and
indexes through the Data Explorer.
This role also grants privileges to view the sample query field
values in the Performance Advisor.
|
-
Project Read Only
|
Grants read-only access to most aspects of the project,
including: all activity, operational data, users, and user roles.
The user, however, cannot access the
Data Explorer. |