Docs Menu
Docs Home
/
MongoDB Atlas
/ / /

Manage Access to a Project

On this page

  • Required Access
  • Add Users or Teams to a Project
  • View Who Can Access a Project
  • View User Invitations
  • Cancel or Update User Invitations
  • Remove Users or Teams from a Project
  • Edit a User's or Team's Role in a Project

Important

Project Invitation Deprecation

The Atlas release on September 13, 2023 deprecates project invitations.

When you invite an organization member to projects within the organization, the user is automatically granted access to those projects and doesn't receive any invitations. When you invite a user to projects in an organization that the user doesn't belong to, the user receives a single invitation to the organization, which includes access to all of the projects that you grant them access to. Invitations expire after 30 days.

You can grant Atlas users and teams access to Atlas projects. Assign user roles to enforce permission levels for Atlas users and teams.

To perform any of the following actions, you must have Project Owner access to Atlas.

Important

Adding a user to a project also adds that user to the organization.

Atlas limits the number of teams to a maximum of:

  • 100 teams per project and

  • 250 teams per organization.

Atlas also limits Atlas user membership to a maximum of:

  • 500 per project and

  • 500 per organization, which includes the combined membership of all projects in the organization.

Atlas raises an error if an operation exceeds these limits.

Example

You have an organization with five projects. Each project has 100 Atlas users. Each Atlas user belongs to only one project. You cannot add any Atlas users to this organization or any project in that organization without first removing existing Atlas users from the organization or project membership.

To using the Atlas CLI, run the following command:

atlas accessLists create [entry] [options]

To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas accessLists create.

Tip

To invite a user or team to a project using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2
3
4
  1. Enter the new user's email address or Jira username, or an existing team name.

    If the console finds a connected Jira account, Atlas invites the user to the Atlas project. If the user accepts the invite, that user is added to the corresponding Jira group.

    If you want to grant access to a new team, you must first create the team.

  2. Press Enter or click on the email address, Jira username, or team name.

  3. Repeat for any additional users or teams.

5

By default, each user is given the Project Read Only role. To change or add additional roles for each user or team, click on the role dropdown menu, then select the checkboxes for each role you want the user or team to have in the project.

All team members share the roles assigned to the team on this project.

6

Atlas sends an email to the selected users inviting them to join the project. Invited users do not have access to the project until they accept the invitation. Invitations expire after 30 days.

To list all users in the project you specify using the Atlas CLI, run the following command:

atlas projects users list [options]

To list all teams for a project using the Atlas CLI, run the following command:

atlas projects teams list [options]

To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for atlas projects users list and atlas projects teams list.

To view which users, teams, or API Keys can access a project using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2

Each tab lists the project's Atlas users, teams, or API Keys along with their project roles and actions you can take on that user, team, or API Key.

Important

Project Invitation Deprecation

The Atlas release on September 13, 2023 deprecates project invitations.

When you invite an organization member to projects within the organization, the user is automatically granted access to those projects and doesn't receive any invitations. When you invite a user to projects in an organization that the user doesn't belong to, the user receives a single invitation to the organization, which includes access to all of the projects that you grant them access to. Invitations expire after 30 days.

To list all pending invitations to the project you specify using the Atlas CLI, run the following command:

atlas projects invitations list [options]

To return the details for one pending invitation to the project you specify using the Atlas CLI, run the following command:

atlas projects invitations describe <invitationId> [options]

To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for atlas projects invitations list and atlas projects invitations describe.

To view user invitations using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2

Each tab lists the project's Atlas users, teams, or API Keys along with their project roles and actions you can take on that user, team, or API Key.

The Users tab lists any outstanding invitations to users to join the project and any requests from users who want to join the project. A user can request to join a project when they first register for Atlas.

Individual users are ordered by status. They appear in the following sequence:

  1. Users currently in your project.

  2. Users with pending invitations to join your project.

  3. Users requesting to join your project.

Atlas displays the Name of users who have not accepted their invitation as Pending User and their role as --invite sent--.

Important

Project Invitation Deprecation

The Atlas release on September 13, 2023 deprecates project invitations.

When you invite an organization member to projects within the organization, the user is automatically granted access to those projects and doesn't receive any invitations. When you invite a user to projects in an organization that the user doesn't belong to, the user receives a single invitation to the organization, which includes access to all of the projects that you grant them access to. Invitations expire after 30 days.

To using the Atlas CLI, run the following command:

atlas accessLists create [entry] [options]

To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas accessLists create.

To cancel a user invitation using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2

Each tab lists the project's Atlas users, teams, or API Keys along with their project roles and actions you can take on that user, team, or API Key.

The Users tab lists any outstanding invitations to users to join the project and any requests from users who want to join the project. To cancel an invitation, click to the right of the user's name on the Users tab.

To delete a user from a project using the Atlas CLI, run the following command:

atlas projects users delete <ID> [options]

To remove a team from the project you specify using the Atlas CLI, run the following command:

atlas projects teams delete <teamId> [options]

To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for atlas projects users delete and atlas projects teams delete.

To remove a user or team from a project using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2
3

Click to the right of the Atlas user or team you want to remove.

4
  • To confirm an Atlas user removal, click Remove User.

  • To confirm a team removal, click Delete Team.

  • To keep the Atlas user or team in the project, click Cancel.

Note

You can't edit roles for specific users on the Access Manager page if you configure role mappings for IdP groups.

To update roles for a team in the project you specify using the Atlas CLI, run the following command:

atlas projects teams update <teamId> [options]

To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas projects teams update.

Note

Atlas CLI Limitation

You can't update a user's role in a project using the Atlas CLI.

To edit the project roles for a user or team using the Atlas UI:

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. Select your desired project from the list of projects in the Projects page.

  3. Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.

  4. Click Access Manager in the navigation bar, then click your project.

2
  • To edit an Atlas user, click the Users tab.

  • To edit a team, click the Teams tab.

3

In the Actions column, click Edit Permissions next to the Atlas user or team whose permissions you want to modify.

4
5

You might need to enter verification information.

Back

Project Access

Next

Settings