> For the complete MongoDB documentation index, see www.mongodb.com/docs/llms.txt # Configure Database Users Create database users to provide clients access to the clusters in your project. **Note:** The MongoDB Atlas Shared Responsibility Model defines the complementary duties of MongoDB and its customers in maintaining a secure and resilient data environment. Under this framework, MongoDB manages the security and operational integrity of the underlying platform, while customers are responsible for the configuration, management, and data policies of their specific deployments. For a detailed breakdown of ownership across security and operational excellence, see [Shared Responsibility Model.](https://www.mongodb.com/resources/products/fundamentals/shared-responsibility) A database user's access is determined by the roles assigned to the user. When you create a database user, any of the [built-in roles](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-user-privileges) add the user to all clusters in your Atlas project. To specify which resources a database user can access in your project, you can select the option Restrict Access to Specific Clusters in the Atlas UI or set [specific privileges](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-specific-privileges) and [custom roles.](https://www.mongodb.com/docs/atlas/security-add-mongodb-roles.md#std-label-mongodb-roles) Database users are separate from Atlas users. Database users have access to MongoDB databases, while Atlas users have access to the Atlas application itself. Atlas supports creating temporary database users that automatically expire within a user-configurable 7-day period. Atlas audits the creation, deletion, and updates of both temporary and non-temporary database users in the project's [Activity Feed.](https://www.mongodb.com/docs/atlas/alert-resolutions.md#std-label-project-activity-feed) **Note: Self-Managed Deployments** The information on this page applies only to deployments hosted in Atlas. To learn how to create database users on self-managed deployments, see [Create a User on Self-Managed Deployments.](https://www.mongodb.com/docs/manual/tutorial/create-users.md#std-label-create-users) ## Limitations The following limitations apply only to deployments hosted in MongoDB Atlas. If any of these limits present a problem for your organization, contact [Atlas support.](https://www.mongodb.com/docs/atlas/support/) - You must use the [Atlas CLI](https://www.mongodb.com/docs/atlas/cli/stable/command/atlas-dbusers-create/), [Atlas Administration API](https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/#tag/Database-Users), Atlas UI, or a supported [integration](https://www.mongodb.com/docs/atlas/partner-integrations/#std-label-partner-integrations) to manage database users on Atlas clusters. Otherwise, Atlas rolls back any user modifications. - The available Atlas [built-in roles](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-built-in-roles) and [specific privileges](https://www.mongodb.com/docs/atlas/security-add-mongodb-users/#std-label-atlas-specific-privileges) support a subset of MongoDB commands. For more information, see [Unsupported Commands in M10+ Clusters](https://www.mongodb.com/docs/atlas/unsupported-commands/#std-label-paid-tier-command-limitations) for more information. - You can create a maximum of 100 database users per Atlas project. ## Database User Authentication Methods Atlas offers the following forms of authentication for database users: - **Password:** [SCRAM](https://www.mongodb.com/docs/manual/core/security-scram.md#std-label-authentication-scram) is MongoDB's default authentication method. SCRAM requires a password for each user. The [authentication database](https://www.mongodb.com/docs/manual/core/security-users.md#std-label-user-authentication-database) for SCRAM-authenticated users is the `admin` database. **Note:** By default, Atlas supports SCRAM-SHA-256 authentication. If you created a user before MongoDB 4.0, you must update MongoDB 4.0, update their passwords to generate SCRAM-SHA-256 credentials. You may reuse existing passwords. **When to use SCRAM:** You can use SCRAM authentication for human users and application users. For lower environments, SCRAM is a suitable authentication method. For production and higher environments, follow security best practices to keep secrets secure and short-term, such as integrating with Privileged Access Management (PAM) solutions. - **X.509 Certificates:** [X.509 Certificates](https://www.mongodb.com/docs/manual/core/security-x.509/), also known as mutual TLS or mTLS, allow passwordless authentication by using a trusted certificate. The [authentication database](https://www.mongodb.com/docs/manual/core/security-users.md#std-label-user-authentication-database) for X.509-authenticated users is the `$external` database. If you [enable LDAP authorization](https://www.mongodb.com/docs/atlas/security-ldaps.md#std-label-ldaps-authentication-authorization), you can't connect to your clusters with users that authenticate with an Atlas-managed X.509 certificate. To enable LDAP (Lightweight Directory Access Protocol) and connecting to your clusters with X.509 users, see [Set Up Self-Managed X.509 Certificates.](https://www.mongodb.com/docs/atlas/security-self-managed-x509.md#std-label-self-managed-x509) **When to use X.509:** X.509 authentication is suitable for secure workload access when workload identity federation (OIDC) or AWS IAM authentication is not feasible, or when mutual authentication is required. - **OIDC:** OpenID Connect (OIDC) authentication enables passwordless, secretless authentication using external identity providers. Atlas supports the following types of OIDC authentication: - [Workforce Identity Federation](https://www.mongodb.com/docs/atlas/workforce-oidc/#std-label-oidc-authentication-workforce) for human principals such as employees, partners, and contractors. - [Workload Identity Federation](https://www.mongodb.com/docs/atlas/workload-oidc/#std-label-oidc-authentication-workload) for applications using external programmatic identities such as Azure Service Principals, Azure Managed Identities, and Google Service Accounts. The [authentication database](https://www.mongodb.com/docs/manual/core/security-users.md#std-label-user-authentication-database) for OIDC-authenticated users is the `$external` database. OIDC authentication is available only on clusters which use MongoDB version 7.0 and higher. **When to use OIDC:** For human users, we recommend that you use Workforce Identity Federation with OIDC. For application users, we recommend that you use Workload Identity Federation with OIDC for applications that run on GCP or Azure. - **AWS IAM:** You can create a database user which uses an [AWS IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) User or Role ARN (Amazon Resource Name) for authentication. The [authentication database](https://www.mongodb.com/docs/manual/core/security-users.md#std-label-user-authentication-database) for AWS IAM-authenticated users is the `$external` database. **When to use AWS IAM:** We recommend that you use AWS IAM authentication with IAM roles for application users running on AWS. ## Required Access To add database users, you must have [`Organization Owner`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Organization-Owner), [`Organization Stream Processing Admin`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Organization-Stream-Processing-Admin), [`Project Owner`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Project-Owner), [`Project Stream Processing Owner`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Project-Stream-Processing-Owner), or [`Project Database Access Admin`](https://www.mongodb.com/docs/atlas/reference/user-roles.md#mongodb-authrole-Project-Database-Access-Admin) access to Atlas. ## Manage Database Users ### Add Database Users Select an authentication mechanism and follow the steps to create a new database user using the Atlas UI. 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Open the Add New Database User dialog box. If it isn't already displayed, click the Database Users tab. Click Add New Database User. 3. Select Password. In the Authentication Method section of the Add New Database User modal window, select the box labeled Password. 4. Enter user information. Under Password Authentication, there are two text fields. Enter a username for the new user in the top text field. Enter a password for the new user in the lower text field. To use a password auto-generated by Atlas, click the Autogenerate Secure Password button. 5. Assign privileges. Select the database user privileges. You can assign privileges to the new user in one or more of the following ways: - Select a [built-in role](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-user-privileges) from the Built-in Role dropdown menu. You can select one built-in role per database user within the Atlas UI. If you delete the default option, you can click Add Built-in Role to select a new built-in role. - If you have any [custom roles](https://www.mongodb.com/docs/atlas/security-add-mongodb-roles.md#std-label-mongodb-roles) defined, you can expand the Custom Roles section and select one or more roles from the Custom Roles dropdown menu. Click Add Custom Role to add more custom roles. You can also click the Custom Roles link to see the custom roles for your project. - Expand the Specific Privileges section and select one or more [privileges](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-specific-privileges) from the Specific Privileges dropdown menu. Click Add Specific Privilege to add more privileges. This assigns the user specific privileges on individual databases and collections. Atlas can apply a built-in role, multiple custom roles, and multiple specific privileges to a single database user. To remove an applied role or privilege, click Delete next to the role or privilege you wish to delete. **Note:** Atlas doesn't display the Delete icon next to your Built-in Role, Custom Role, or Specific Privilege selection if you selected only one option. You can delete the selected role or privilege once you apply another role or privilege. For more information on authorization, see [Role-Based Access Control](https://www.mongodb.com/docs/manual/core/authorization/) and [Built-in Roles](https://www.mongodb.com/docs/manual/reference/built-in-roles/) in the MongoDB manual. 6. Specify the resources in the project that the user can access. By default, users can access all the clusters and federated database instances in the project. You can restrict access to specific clusters and federated database instances by doing the following: Toggle Restrict Access to Specific Clusters/Federated Database Instances to ON. Select the clusters and federated database instances to grant the user access to from the Grant Access To list. 7. Save as temporary user. Toggle Temporary User to On and choose a time after which Atlas can delete the user from the Temporary User Duration dropdown. You can select one of the following time periods for the user to exist: - 6 hours - 1 day - 1 week In the Database Users tab, temporary users display the time remaining until Atlas will delete the user. Once Atlas deletes the user, any client or application that uses the temporary user's credentials loses access to the cluster. 8. Click Add User. ### View Database Users and Certificates To view Atlas database users and X.509 certificates in the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. View Atlas database users. If it's not already displayed, click the Database Users tab. Click Edit for the user to view their privileges, authentication details, and X.509 certificates. ### Modify Database Users To modify existing users for an Atlas project: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Modify an existing user. If it's not already displayed, click the Database Users tab. Click Edit for the user you want to modify. You can modify the privileges and authentication details assigned to the user. You cannot modify the authentication method. The following table describes what you can do for each user: | User Type | Action | | --- | --- | | SCRAM authenticated users | Edit a user's password. | | X.509 certificate authenticated users | Download a new certificate. | | AWS IAM users | Modify database access privileges. | | Temporary users | Modify the time period the user exists or make the user a permanent user, provided the user's expiration date has not already passed. | **Note:** You cannot change a permanent user into a temporary user. If you change a temporary user into a permanent user, you cannot make it temporary again. Click Update User to save the changes. ### Delete Database Users To delete existing users for an Atlas project using the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. ### Add Database Users Select an authentication mechanism and follow the steps to create a new database user using the Atlas UI. 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Open the Add New Database User dialog box. If it isn't already displayed, click the Database Users tab. Click Add New Database User. 3. Select Certificate. In the Authentication Method section of the Add New Database User modal window, select the box marked Certificate. 4. Enter user information. Enter a username for the new user in the Common Name text field. (Optional) If you would like to download an Atlas-managed certificate after the new user is created, toggle the Download certificate when user is added switch to On. **Note:** To download the certificate upon saving, you must provide a certificate expiration date. (Optional) Select a certificate expiration period. X.509 certificates expire and are invalid after the certificate expiration date you set. A user cannot log in with an expired X.509 certificate and must be issued a new certificate. To help manage this, Atlas automatically creates a project-level alert when you create a new user with X.509 authentication enabled. This alert sends a notification 30 days before that user's latest certificate expires, repeating every 24 hours. You can view and edit this alert from Atlas's Alert Settings page. For more information on configuring alerts, see [Configure Alert Settings.](https://www.mongodb.com/docs/atlas/configure-alerts.md#std-label-configure-alerts) **Important:** If a user loses their certificate, they will need a new certificate before they can log in again. **Important:** You cannot revoke X.509 certificates. To revoke an X.509 certificate-authenticated user's access to your project, you must delete that user. If you prefer to manage your own X.509 certificates, you can upload a PEM-encoded certificate authority through [Self-Managed X.509 Certificates.](https://www.mongodb.com/docs/atlas/security-self-managed-x509.md#std-label-self-managed-x509) 5. Assign privileges. Select the database user privileges. You can assign privileges to the new user in one or more of the following ways: - Select a [built-in role](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-user-privileges) from the Built-in Role dropdown menu. You can select one built-in role per database user within the Atlas UI. If you delete the default option, you can click Add Built-in Role to select a new built-in role. - If you have any [custom roles](https://www.mongodb.com/docs/atlas/security-add-mongodb-roles.md#std-label-mongodb-roles) defined, you can expand the Custom Roles section and select one or more roles from the Custom Roles dropdown menu. Click Add Custom Role to add more custom roles. You can also click the Custom Roles link to see the custom roles for your project. - Expand the Specific Privileges section and select one or more [privileges](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-specific-privileges) from the Specific Privileges dropdown menu. Click Add Specific Privilege to add more privileges. This assigns the user specific privileges on individual databases and collections. Atlas can apply a built-in role, multiple custom roles, and multiple specific privileges to a single database user. To remove an applied role or privilege, click Delete next to the role or privilege you wish to delete. **Note:** Atlas doesn't display the Delete icon next to your Built-in Role, Custom Role, or Specific Privilege selection if you selected only one option. You can delete the selected role or privilege once you apply another role or privilege. For more information on authorization, see [Role-Based Access Control](https://www.mongodb.com/docs/manual/core/authorization/) and [Built-in Roles](https://www.mongodb.com/docs/manual/reference/built-in-roles/) in the MongoDB manual. 6. Specify the resources in the project that the user can access. By default, users can access all the clusters and federated database instances in the project. You can restrict access to specific clusters and federated database instances by doing the following: Toggle Restrict Access to Specific Clusters/Federated Database Instances to ON. Select the clusters and federated database instances to grant the user access to from the Grant Access To list. 7. Click Add User. ### View Database Users and Certificates To view Atlas database users and X.509 certificates in the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. View Atlas database users. If it's not already displayed, click the Database Users tab. Click Edit for the user to view their privileges, authentication details, and X.509 certificates. ### Modify Database Users To modify existing users for an Atlas project: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Modify an existing user. If it's not already displayed, click the Database Users tab. Click Edit for the user you want to modify. You can modify the privileges and authentication details assigned to the user. You cannot modify the authentication method. The following table describes what you can do for each user: | User Type | Action | | --- | --- | | SCRAM authenticated users | Edit a user's password. | | X.509 certificate authenticated users | Download a new certificate. | | AWS IAM users | Modify database access privileges. | | Temporary users | Modify the time period the user exists or make the user a permanent user, provided the user's expiration date has not already passed. | **Note:** You cannot change a permanent user into a temporary user. If you change a temporary user into a permanent user, you cannot make it temporary again. Click Update User to save the changes. ### Delete Database Users To delete existing users for an Atlas project using the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. ### Add Database Users Select an authentication mechanism and follow the steps to create a new database user using the Atlas UI. **Note:** Starting with MongoDB 8.0, LDAP (Lightweight Directory Access Protocol) authentication and authorization is deprecated. The feature is available and will continue to operate without changes throughout the lifetime of MongoDB 8. LDAP (Lightweight Directory Access Protocol) will be removed in a future major release. For details, see [LDAP Deprecation.](https://www.mongodb.com/docs/manual/core/LDAP-deprecation/) ### View Database Users and Certificates To view Atlas database users and X.509 certificates in the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. View Atlas database users. If it's not already displayed, click the Database Users tab. Click Edit for the user to view their privileges, authentication details, and X.509 certificates. ### Modify Database Users To modify existing users for an Atlas project: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Modify an existing user. If it's not already displayed, click the Database Users tab. Click Edit for the user you want to modify. You can modify the privileges and authentication details assigned to the user. You cannot modify the authentication method. The following table describes what you can do for each user: | User Type | Action | | --- | --- | | SCRAM authenticated users | Edit a user's password. | | X.509 certificate authenticated users | Download a new certificate. | | AWS IAM users | Modify database access privileges. | | Temporary users | Modify the time period the user exists or make the user a permanent user, provided the user's expiration date has not already passed. | **Note:** You cannot change a permanent user into a temporary user. If you change a temporary user into a permanent user, you cannot make it temporary again. Click Update User to save the changes. ### Delete Database Users To delete existing users for an Atlas project using the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. ### Add Database Users Select an authentication mechanism and follow the steps to create a new database user using the Atlas UI. 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Open the Add New Database User or Group dialog box. Click Add New Database User or Group. **Note:** Until you [apply your Workforce IdP to Atlas](https://www.mongodb.com/docs/atlas/workforce-oidc.md#std-label-apply-oidc-idp), this button says Add New Database User. 3. Select Federated Auth. In the Authentication Method section, select Federated Auth. **Note:** Until you [enable Workforce IdP for your organization](https://www.mongodb.com/docs/atlas/workforce-oidc.md#std-label-configure-oidc), you can't select this box. 4. Select Identity Provider and Identifier In the Select Identity Provider section, select a configured OIDC (OpenID Connect) Identity Provider. Specify either the user identifier or group identifier associated with your configured Workforce Identity Provider. **Note:** For Azure Entra ID users, this value maps to the Object Id of your Azure user group rather than user group name. 5. Assign user or group privileges. To assign privileges to the new user or group, do one or more of the following tasks: - Select a [built-in role](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-user-privileges) from the Built-in Role dropdown menu. - You can select one built-in role per database group in the Atlas UI. - If you delete the default option, you can click Add Built-in Role to select a new built-in role. - Select or add [custom roles.](https://www.mongodb.com/docs/atlas/security-add-mongodb-roles.md#std-label-mongodb-roles) - If you have any custom roles defined, you can expand the Custom Roles section and select one or more roles from the Custom Roles dropdown menu. - Click Add Custom Role to add more custom roles. - Click the Custom Roles link to see the custom roles for your project. - Add [privileges.](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-specific-privileges) - Expand the Specific Privileges section and select one or more privileges from the Specific Privileges dropdown menu. - Click Add Specific Privilege to add more privileges. This assigns the group specific privileges on individual databases and collections. - Remove an applied role or privilege. - Click Delete next to the role or privilege to delete. **Note:** Atlas doesn't display the Delete icon next to your Built-in Role, Custom Role, or Specific Privilege selection if you selected only one option. You can delete the selected role or privilege once you apply another role or privilege. Atlas can apply a built-in role, multiple custom roles, and multiple specific privileges to a database group. To learn more about authorization, see [Role-Based Access Control](https://www.mongodb.com/docs/manual/core/authorization/) and [Built-in Roles](https://www.mongodb.com/docs/manual/reference/built-in-roles/) in the MongoDB manual. 6. Specify the resources in the project that the user or group can access. By default, groups can access all the clusters and federated database instances in the project. To restrict access to specific clusters and federated database instances: Toggle Restrict Access to Specific Clusters/Federated Database Instances to On. Select the clusters and federated database instances to grant the group access to from the Grant Access To list. 7. Save as a temporary user or group. Toggle Temporary User or Temporary Group to On and choose a time after which Atlas can delete the user or group from the Temporary User Duration or Temporary Group Duration dropdown. You can select one of the following time periods for the group to exist: - 6 hours - 1 day - 1 week In the Database Users tab, temporary users or groups display the time remaining until Atlas deletes the users or group. After Atlas deletes the user or group, any client or application that uses the temporary user's or group's credentials loses access to the cluster. 8. Add the new database user or group. Do one of the following steps: - If you added a user, click the Add User button. - If you added a group, click the Add Group button. ### View Database Users and Certificates To view Atlas database users and X.509 certificates in the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. View Atlas database users. If it's not already displayed, click the Database Users tab. Click Edit for the user to view their privileges, authentication details, and X.509 certificates. ### Modify Database Users To modify existing users for an Atlas project: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Modify an existing user. If it's not already displayed, click the Database Users tab. Click Edit for the user you want to modify. You can modify the privileges and authentication details assigned to the user. You cannot modify the authentication method. The following table describes what you can do for each user: | User Type | Action | | --- | --- | | SCRAM authenticated users | Edit a user's password. | | X.509 certificate authenticated users | Download a new certificate. | | AWS IAM users | Modify database access privileges. | | Temporary users | Modify the time period the user exists or make the user a permanent user, provided the user's expiration date has not already passed. | **Note:** You cannot change a permanent user into a temporary user. If you change a temporary user into a permanent user, you cannot make it temporary again. Click Update User to save the changes. ### Delete Database Users To delete existing users for an Atlas project using the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. ### Add Database Users Select an authentication mechanism and follow the steps to create a new database user using the Atlas UI. 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Open the Add New Database User dialog box. If it isn't already displayed, click the Database Users tab. Click Add New Database User. 3. Configure the Authentication Method as AWS IAM. Choose AWS IAM in the Authentication Method section of the Add New Database User modal window. Select a user type from the AWS IAM Type dropdown menu: - Role: Authentication for AWS services (like EC2, Lambda, ECS) or applications that assume roles. For application access, MongoDB strongly recommends using IAM roles instead of IAM users. - User: Authentication for individual AWS users that need direct database access. For human users, we recommend that you use [Workforce Identity Federation with OIDC](https://www.mongodb.com/docs/atlas/workforce-oidc/#std-label-oidc-authentication-workforce) instead of AWS IAM authentication. Enter an AWS role or user ARN (Amazon Resource Name): - Role ARN format: `arn:aws:iam::123456789012:role/MyRole` - User ARN format: `arn:aws:iam::123456789012:user/MyUser` Click the See instruction below link for help with finding your ARN. 4. Assign privileges. Select the database user privileges. You can assign privileges to the new user in one or more of the following ways: - Select a [built-in role](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-user-privileges) from the Built-in Role dropdown menu. You can select one built-in role per database user within the Atlas UI. If you delete the default option, you can click Add Built-in Role to select a new built-in role. - If you have any [custom roles](https://www.mongodb.com/docs/atlas/security-add-mongodb-roles.md#std-label-mongodb-roles) defined, you can expand the Custom Roles section and select one or more roles from the Custom Roles dropdown menu. Click Add Custom Role to add more custom roles. You can also click the Custom Roles link to see the custom roles for your project. - Expand the Specific Privileges section and select one or more [privileges](https://www.mongodb.com/docs/manual/reference/built-in-roles.md#std-label-atlas-specific-privileges) from the Specific Privileges dropdown menu. Click Add Specific Privilege to add more privileges. This assigns the user specific privileges on individual databases and collections. Atlas can apply a built-in role, multiple custom roles, and multiple specific privileges to a single database user. To remove an applied role or privilege, click Delete next to the role or privilege you wish to delete. **Note:** Atlas doesn't display the Delete icon next to your Built-in Role, Custom Role, or Specific Privilege selection if you selected only one option. You can delete the selected role or privilege once you apply another role or privilege. For more information on authorization, see [Role-Based Access Control](https://www.mongodb.com/docs/manual/core/authorization/) and [Built-in Roles](https://www.mongodb.com/docs/manual/reference/built-in-roles/) in the MongoDB manual. 5. Specify the resources in the project that the user can access. By default, users can access all the clusters and federated database instances in the project. You can restrict access to specific clusters and federated database instances by doing the following: Toggle Restrict Access to Specific Clusters/Federated Database Instances to ON. Select the clusters and federated database instances to grant the user access to from the Grant Access To list. 6. Save as temporary user. Toggle Temporary User to On and choose a time after which Atlas can delete the user from the Temporary User Duration dropdown. You can select one of the following time periods for the user to exist: - 6 hours - 1 day - 1 week In the Database Users tab, temporary users display the time remaining until Atlas will delete the user. Once Atlas deletes the user, any client or application that uses the temporary user's credentials loses access to the cluster. 7. Click Add User. ### View Database Users and Certificates To view Atlas database users and X.509 certificates in the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. View Atlas database users. If it's not already displayed, click the Database Users tab. Click Edit for the user to view their privileges, authentication details, and X.509 certificates. ### Modify Database Users To modify existing users for an Atlas project: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. 2. Modify an existing user. If it's not already displayed, click the Database Users tab. Click Edit for the user you want to modify. You can modify the privileges and authentication details assigned to the user. You cannot modify the authentication method. The following table describes what you can do for each user: | User Type | Action | | --- | --- | | SCRAM authenticated users | Edit a user's password. | | X.509 certificate authenticated users | Download a new certificate. | | AWS IAM users | Modify database access privileges. | | Temporary users | Modify the time period the user exists or make the user a permanent user, provided the user's expiration date has not already passed. | **Note:** You cannot change a permanent user into a temporary user. If you change a temporary user into a permanent user, you cannot make it temporary again. Click Update User to save the changes. ### Delete Database Users To delete existing users for an Atlas project using the Atlas UI: 1. In Atlas, go to the Database & Network Access page for your project. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar. If it's not already displayed, select your project from the Projects menu in the navigation bar. In the sidebar, click Database & Network Access under the Security heading. The [Database & Network Access](https://cloud.mongodb.com/go?l=https%3A%2F%2Fcloud.mongodb.com%2Fv2%2F%3Cproject%3E%23%2Fsecurity%2Fdatabase) page displays after you complete the preceding steps. ### Add Database Users The Atlas CLI uses the following commands to create new database users and X.509 certificates. The options you specify determine the authentication method. To create a database user for your project using the Atlas CLI, run the following command: ```sh atlas dbusers create [builtInRole]... [options] ``` To create a new Atlas-managed X.509 certificate for the specified database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs create [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers create](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-create/) and [atlas dbusers certs create.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-create/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) ### View Database Users and Certificates #### View Database Users To list all Atlas database users for your project using the Atlas CLI, run the following command: ```sh atlas dbusers list [options] ``` To return the details for a single Atlas database user in the project you specify using the Atlas CLI, run the following command: ```sh atlas dbusers describe [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers list](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-list/) and [atlas dbusers describe.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-describe/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) #### View X.509 Certificates for a Database User To list all Atlas-managed, unexpired certificates for a database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs list [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers certs list.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-list/) ### Modify Database Users To update a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers update [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers update.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-update/) ### Delete Database Users To delete a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers delete [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers delete.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-delete/) ### Add Database Users The Atlas CLI uses the following commands to create new database users and X.509 certificates. The options you specify determine the authentication method. To create a database user for your project using the Atlas CLI, run the following command: ```sh atlas dbusers create [builtInRole]... [options] ``` To create a new Atlas-managed X.509 certificate for the specified database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs create [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers create](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-create/) and [atlas dbusers certs create.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-create/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) ### View Database Users and Certificates #### View Database Users To list all Atlas database users for your project using the Atlas CLI, run the following command: ```sh atlas dbusers list [options] ``` To return the details for a single Atlas database user in the project you specify using the Atlas CLI, run the following command: ```sh atlas dbusers describe [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers list](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-list/) and [atlas dbusers describe.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-describe/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) #### View X.509 Certificates for a Database User To list all Atlas-managed, unexpired certificates for a database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs list [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers certs list.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-list/) ### Modify Database Users To update a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers update [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers update.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-update/) ### Delete Database Users To delete a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers delete [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers delete.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-delete/) ### Add Database Users The Atlas CLI uses the following commands to create new database users and X.509 certificates. The options you specify determine the authentication method. To create a database user for your project using the Atlas CLI, run the following command: ```sh atlas dbusers create [builtInRole]... [options] ``` To create a new Atlas-managed X.509 certificate for the specified database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs create [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers create](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-create/) and [atlas dbusers certs create.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-create/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) ### View Database Users and Certificates #### View Database Users To list all Atlas database users for your project using the Atlas CLI, run the following command: ```sh atlas dbusers list [options] ``` To return the details for a single Atlas database user in the project you specify using the Atlas CLI, run the following command: ```sh atlas dbusers describe [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers list](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-list/) and [atlas dbusers describe.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-describe/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) #### View X.509 Certificates for a Database User To list all Atlas-managed, unexpired certificates for a database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs list [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers certs list.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-list/) ### Modify Database Users To update a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers update [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers update.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-update/) ### Delete Database Users To delete a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers delete [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers delete.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-delete/) ### Add Database Users The Atlas CLI uses the following commands to create new database users and X.509 certificates. The options you specify determine the authentication method. To create a database user for your project using the Atlas CLI, run the following command: ```sh atlas dbusers create [builtInRole]... [options] ``` To create a new Atlas-managed X.509 certificate for the specified database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs create [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers create](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-create/) and [atlas dbusers certs create.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-create/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) ### View Database Users and Certificates #### View Database Users To list all Atlas database users for your project using the Atlas CLI, run the following command: ```sh atlas dbusers list [options] ``` To return the details for a single Atlas database user in the project you specify using the Atlas CLI, run the following command: ```sh atlas dbusers describe [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers list](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-list/) and [atlas dbusers describe.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-describe/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) #### View X.509 Certificates for a Database User To list all Atlas-managed, unexpired certificates for a database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs list [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers certs list.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-list/) ### Modify Database Users To update a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers update [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers update.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-update/) ### Delete Database Users To delete a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers delete [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers delete.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-delete/) ### Add Database Users The Atlas CLI uses the following commands to create new database users and X.509 certificates. The options you specify determine the authentication method. To create a database user for your project using the Atlas CLI, run the following command: ```sh atlas dbusers create [builtInRole]... [options] ``` To create a new Atlas-managed X.509 certificate for the specified database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs create [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers create](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-create/) and [atlas dbusers certs create.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-create/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) ### View Database Users and Certificates #### View Database Users To list all Atlas database users for your project using the Atlas CLI, run the following command: ```sh atlas dbusers list [options] ``` To return the details for a single Atlas database user in the project you specify using the Atlas CLI, run the following command: ```sh atlas dbusers describe [options] ``` To learn more about the syntax and parameters for the previous commands, see the Atlas CLI documentation for [atlas dbusers list](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-list/) and [atlas dbusers describe.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-describe/) **See also: Related Links** - [Install the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/install-atlas-cli/) - [Connect to the Atlas CLI](https://www.mongodb.com/docs/atlas/cli/current/connect-atlas-cli/) #### View X.509 Certificates for a Database User To list all Atlas-managed, unexpired certificates for a database user using the Atlas CLI, run the following command: ```sh atlas dbusers certs list [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers certs list.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-certs-list/) ### Modify Database Users To update a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers update [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers update.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-update/) ### Delete Database Users To delete a database user from your project using the Atlas CLI, run the following command: ```sh atlas dbusers delete [options] ``` To learn more about the command syntax and parameters, see the Atlas CLI documentation for [atlas dbusers delete.](https://www.mongodb.com/docs/atlas/cli/current/command/atlas-dbusers-delete/) ### Add Database Users You can add database users through the Atlas Administration API. The options you specify determine the authentication method. To learn more, see [Create One Database User.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupdatabaseuser) ### View Database Users and Certificates To view Atlas database users using the Atlas Administration API, see [Get All.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-listgroupdatabaseusers) ### Modify Database Users You can update database users through the Atlas Administration API. To learn more, see [Update One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-updategroupdatabaseuser) ### Delete Database Users You can delete database users through the Atlas Administration API. To learn more, see [Delete One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-deletegroupdatabaseuser) ### Add Database Users You can add database users through the Atlas Administration API. The options you specify determine the authentication method. To learn more, see [Create One Database User.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupdatabaseuser) ### View Database Users and Certificates To view Atlas database users using the Atlas Administration API, see [Get All.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-listgroupdatabaseusers) ### Modify Database Users You can update database users through the Atlas Administration API. To learn more, see [Update One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-updategroupdatabaseuser) ### Delete Database Users You can delete database users through the Atlas Administration API. To learn more, see [Delete One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-deletegroupdatabaseuser) ### Add Database Users You can add database users through the Atlas Administration API. The options you specify determine the authentication method. To learn more, see [Create One Database User.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupdatabaseuser) ### View Database Users and Certificates To view Atlas database users using the Atlas Administration API, see [Get All.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-listgroupdatabaseusers) ### Modify Database Users You can update database users through the Atlas Administration API. To learn more, see [Update One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-updategroupdatabaseuser) ### Delete Database Users You can delete database users through the Atlas Administration API. To learn more, see [Delete One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-deletegroupdatabaseuser) ### Add Database Users You can add database users through the Atlas Administration API. The options you specify determine the authentication method. To learn more, see [Create One Database User.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupdatabaseuser) ### View Database Users and Certificates To view Atlas database users using the Atlas Administration API, see [Get All.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-listgroupdatabaseusers) ### Modify Database Users You can update database users through the Atlas Administration API. To learn more, see [Update One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-updategroupdatabaseuser) ### Delete Database Users You can delete database users through the Atlas Administration API. To learn more, see [Delete One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-deletegroupdatabaseuser) ### Add Database Users You can add database users through the Atlas Administration API. The options you specify determine the authentication method. To learn more, see [Create One Database User.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupdatabaseuser) ### View Database Users and Certificates To view Atlas database users using the Atlas Administration API, see [Get All.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-listgroupdatabaseusers) ### Modify Database Users You can update database users through the Atlas Administration API. To learn more, see [Update One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-updategroupdatabaseuser) ### Delete Database Users You can delete database users through the Atlas Administration API. To learn more, see [Delete One.](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-deletegroupdatabaseuser)