Docs Menu

Docs HomeMongoDB Ops Manager

Ops Manager Access

On this page

  • Considerations
  • Add Users to Ops Manager
  • Manage User Access to an Organization
  • Add Users to an Organization
  • View Active Users and Pending Invitations in an Organization
  • Edit User's Role in an Organization
  • Remove Users from an Organization
  • Manage Team Access to an Organization
  • Create a Team
  • Manage Team Members
  • Rename a Team
  • Delete a Team
  • Manage Application Access to an Organization
  • Manage Access to a Project
  • View Who Can Access a Project
  • View Active Users and Pending Invitations to Project
  • Add Users or Teams to a Project
  • Remove Users or Teams from a Project
  • Edit a User's or Team's Role in a Project
  • Manage Application Access to a Project

To access an Ops Manager organization or the project within that organization, an Ops Manager user must be a member of that organization. Depending on the user's role in the organization, the Ops Manager user may also need to be a member of the project to access a project.

An Ops Manager user can be a member of multiple projects and multiple organizations. If an Ops Manager user is a member of a project, the user's access to the project is determined their role in the project.

Within an organization, you can group users into teams. Users can belong to multiple teams. Teams can be assigned to multiple projects. The team's project role sets the team members' access to the project.

Note

Ops Manager users are separate from MongoDB users.

You can register with and login using your Google account or using your email account.

Note

Unless you have disabled invitation mode, you must invite users to Ops Manager projects and organizations. The following procedures result in an email invitation being sent to the users you want to add. The users must accept your invitation to join a project or organization.

  • To invite a new user to a project, see Add Users or Teams to a Project.

  • To invite a new user to an organization, see Add Users to an Organization.

Note

Required Permissions

To perform any of the following actions, you must have the Organization Owner role.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. If it is not already displayed, click the Users tab.

2
  1. Select Invite Users from the Manage button menu.

  2. From the Add Users page, enter the new user's email address in the combo box.

    After typing in the email address, either press Enter or click on the email address beneath the New User header under the combo box.

  3. Repeat for any additional users.

3

By default, each user is given the Organization Member role. To change or add additional roles for each user, click the role dropdown menu, then select the checkboxes for each role you want the user to have in the organization.

4

Click Add Users to Organization.

Ops Manager sends an e-mail to the selected users inviting them to join the project. Invited users do not have access to the project until they accept the invitation. Invitations expire after 30 days.

To view users in an organization:

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

This page lists:

  • Users who are members of your Ops Manager organization.

  • Pending users who have not accepted to the invitation to join the organization or project within the organization.

2

To edit roles through Ops Manager for the organization:

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. If it is not already displayed, click the Users tab.

2
3
4

Note

You cannot remove the last Organization Owner from an organization.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. If it is not already displayed, click the Users tab.

2
3

In an organization, you can group its users into teams to facilitate adding and granting roles to multiple users to projects. You assign project access at the team level. All users in the team share the same project access.

Organization users can belong to multiple teams.

Note

Required Permissions

To perform any of the following actions, you must have the Organization Owner role.

Note

There is an upper limit of 250 teams per organization.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. Click the Teams tab.

2
  1. Click Create Team.

  2. From the Create a Team page, enter the your team name in the Name Your Team box. The name must be unique within an organization.

  3. To add existing organization users to the team, click in the Add Members box and either start typing their Ops Manager username or click on the name of a user that appears in the combo box.

  4. Click Create Team to confirm.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. Click the Teams tab.

2

Click the name of the team you wish to modify.

  1. Click Add Members.

  2. Type the name or email of the user from the combo box.

    You can only add users who are part of the organization.

    Users who have not accepted an invitation to join the organization cannot be added as team members.

  3. Click Add Members.

  4. Repeat for additional team members.

Click to the right of the member.

Removing a user from the team removes the user's project assignments granted by the team membership.

If a user is assigned to a project through both a team and individual assignment, removing the user from a team does not remove the user's assignment to that project.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. Click the Teams tab.

2

For the team you wish to rename:

  1. Click in the Actions column.

  2. Click Rename Team.

  3. Enter a new name for the team.

    The team name must be unique within the organization.

  4. Click Rename Team.

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. Click the Teams tab.

2

For the team you wish to delete:

  1. Click next to the team that you want to delete.

  2. Confirm that you wish to proceed with team deletion.

    For users belonging the team, deleting a team removes the users' project assignments granted by that team membership.

Note

Required Permissions

To manage API Keys for an Organization, you must have the Organization Owner role.

To learn how to manage an Application's Access to an Organization using API Keys, see:

Note

Required Permissions

To perform any of the following actions, you must have either the Project Owner or Project User Admin role.

To view which users, teams, or API Keys can access a project:

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. If it is not already displayed, click the Users tab.

2

Each tab lists the project's users, teams, or API Keys along with their project roles and corresponding actions.

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it is not already displayed, select your desired project from the Project menu in the navigation bar.

  3. Click Access Manager in the navigation bar, then click your project.

The Users tab also lists any outstanding invitations to users to join the project and any requests from users who want to join the project. A user can request to join a project when they first register for Ops Manager.

Individual users are ordered by status. They appear in the following sequence:

  1. Users currently in your project.

  2. Users with pending invitations to join your project.

  3. Users requesting to join your project.

Ops Manager displays the Name of users who have not accepted their invitation as Pending User and their role as --invite sent--.

2

Note

There is an upper limit of 250 users per team.

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it is not already displayed, select your desired project from the Project menu in the navigation bar.

  3. Click Access Manager in the navigation bar, then click your project.

  1. If it is not already displayed, click the Users tab.

2
  • To add an individual user:

    1. Select Invite Users from the Manage button menu.

    2. From the Add Users page, enter the new user's email address in the combo box.

      After typing in the email address, you must either press Enter or click on the email address beneath the New User header under the combo box.

    3. Repeat for any additional users.

  • To add a team:

    1. Select Create Team from the Manage button menu.

    2. Enter the team's name in the Name Your Team box.

    3. Enter the new team member's email address or Jira username in the Add Members combo box.

      After typing in the email address, either press Enter or click on the email address in the combo box.

    4. Repeat for any additional team members.

3

By default, each user and team is given the Project Member role. To change or add additional roles for each user or team, click on the role dropdown menu, then select the checkboxes for each role you want the user or team to have in the project.

All team members share the roles assigned to the team on this project.

4
  • For a new user, click Add Users to Project.

    Ops Manager sends an e-mail to the selected users inviting them to join the project. Invited users do not have access to the project until they accept the invitation. Invitations expire after 30 days.

  • For a new team, click Create Team.

Note

If the added user does not belong to the project's organization, Ops Manager adds the user to the organization.

Note

You cannot remove the last Project Owner from an organization.

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it is not already displayed, select your desired project from the Project menu in the navigation bar.

  3. Click Access Manager in the navigation bar, then click your project.

  1. If it is not already displayed, click the Users tab.

2
  • If it is not already displayed and you want to remove a user, click the Users tab.

  • If you want to remove a team, click the Teams tab.

3
4
  • To confirm a user removal, click Remove User from Organization.

  • To confirm a team removal, click Delete Team."

To assign roles to any user in any group, you must have either the Global User Admin role or Global Owner role.

You can assign roles either through Ops Manager, as described here, or through an LDAP server after you have set up LDAP integration and created LDAP groups for your Ops Manager roles.

To edit roles through Ops Manager, for the project:

1
  1. If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

  2. Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

  1. If it is not already displayed, click the Users tab.

2
3
4

To assign roles through an LDAP server, you must set up LDAP integration and create LDAP groups for your Ops Manager roles. You must also have the permissions described in Edit a User's or Team's Role in a Project.

For LDAP authentication, the welcome form includes the ability to assign LDAP groups to the Ops Manager group-level and global roles.

  1. Configure LDAP authentication.

  2. Create groups on your LDAP server for each of the available Ops Manager group-level and global roles.

To assign LDAP groups to Ops Manager roles:

  1. Click the Admin link at the top right of the Ops Manager page.

  2. Click General and then click Projects.

  3. Click the pencil icon at the far right of a group name. Edit the Roles interface by adding the appropriate LDAP group name to its corresponding Ops Manager group name.

Because Ops Manager does not update role assignments stored in your LDAP server, assign roles by assigning users to groups in your LDAP server.

Configure global roles in the conf-mms.properties configuration file.

Note

Required Permissions

To manage API Keys for an Organization, you must have the Project User Admin role.

To learn how to manage a Application's Access to an Project using API Keys, see:

←  Edit Project SettingsProgrammatic Access to Ops Manager →