Docs Home → MongoDB Ops Manager
Ops Manager Roles![](/docs/ops-manager/master/assets/link.svg)
On this page
Ops Manager roles allow you to grant users different levels of access to Ops Manager. You can grant a user the privileges needed to perform a specific set of tasks and no more.
If you use LDAP authentication for Ops Manager, you must:
Create LDAP groups for each available role that follows.
Assign users to these LDAP groups.
Neither the LDAP server nor Ops Manager synchronizes the groups and roles without user intervention.
To assign user roles, see Edit a User's or Team's Role in a Project. You can't assign your own roles.
Organization Roles![](/docs/ops-manager/master/assets/link.svg)
Organization Role | Privileges |
---|---|
An Ops Manager user with this organization role can:
| |
An Ops Manager user with this organization role can:
| |
An Ops Manager user with this organization role can grant read-only
access to everything in the organization, including all projects
in the organization. | |
An Ops Manager user with this organization role can grant read-only access to the organization (settings, users, and billing) and the projects to which they belong. Within a project, an A |
Project Roles![](/docs/ops-manager/master/assets/link.svg)
The following roles grant privileges within a project.
Project Role | Privileges |
---|---|
An Ops Manager user with this project role can view most project components, including all:
This user can't modify or delete anything. | |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
| |
An Ops Manager user with this project role can:
NoteA user with |
Global Roles![](/docs/ops-manager/master/assets/link.svg)
Global roles have all the same privileges as the equivalent Organization and Project roles, except that they have these privileges for all projects and organizations. They also have some additional privileges as noted in the following table.
The following roles grant privileges for all projects and organizations.
Global Role | Description |
---|---|
Grants
| |
Grants
| |
Grants
| |
Grants
| |
Grants Project Automation Admin access
to all projects. The role additionally grants access to view
system statistics through the admin console. | |
Grants privileges from all roles combined except those required to access Data Explorer: |