ユーザー権限

mongosync接続文字列で指定されたユーザーには、ソースクラスターと宛先クラスターで必要な権限が必要です。権限は、環境と逆同期を使用するかどうかによって異なります。

自己管理型クラスター

自己管理型権限は次のとおりです。

同期タイプ	必要なソース権限	必要な宛先権限
default	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`
元に戻す	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`
複数の反転	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`

サーバーロールの詳細については、「自己管理型配置でのロールベースのアクセス制御」を参照してください。

ユーザー権限を更新するには、 grantRolesToUserを参照してください。

表に記載されているロールに加えて、カスタムロールを使用して以下のソース権限をプロビジョニングします。

{   "resource": { "db": "local", "collection": "oplog.rs" },   "actions": [ "find", "collStats" ]}

Atlas クラスター

Atlas の権限は次のとおりです。

同期タイプ	必要なソース権限	必要な宛先権限
default	atlasAdmin	atlasAdmin `bypassWriteBlockingMode`
元に戻す、または複数の元に戻す	atlasAdmin `bypassWriteBlockingMode`	atlasAdmin `bypassWriteBlockingMode`

Atlas ロールの詳細については、Atlas ユーザーロールを参照してください。

Atlas user権限を更新するには、「プロジェクトへのアクセス権の管理」を参照してください。

最小特権

注意

Mongosync のバージョン間で、最小限の権限が変更される可能性があります。

一部の特権アクションはカスタムロールを使用して Atlas で作成できないため、最小特権はオンプレミス配置にのみ適用されます。

最小のソース特権は次のとおりです。

同期タイプ	最小ソース特権
default	[ { "resource": { "cluster": true }, "actions": [ "appendOplogNote", "bypassWriteBlockingMode", "getDefaultRWConcern", "getShardMap", "hostInfo", "listDatabases", "listShards", "replSetGetConfig", "replSetGetStatus", "serverStatus", "setUserWriteBlockMode" ] }, { "resource": { "db": "", "collection": "" }, "actions": [ "changeStream", "collStats", "find", "indexStats", "listCollections", "listIndexes" ] }, { "resource": { "db": "local", "collection": "oplog.rs" }, "actions": [ "find", "collStats" ] }, { "resource": { "db": "admin", "collection": "system.version" }, "actions": [ "find", "collStats" ] }, { "resource": { "db": "", "collection": "system.js" }, "actions": [ "listCollections", "listIndexes" ] }, { "resource": { "db": "config", "collection": "shards" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "collections" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "version" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "settings" }, "actions": [ "find", "update" ] }, { "resource": { "system_buckets": "" }, "actions": [ "listCollections", "listIndexes" ] }]
元に戻す	デフォルトのソース特権とデフォルトの宛先特権のすべて。
複数の反転	デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。 `[ { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }]`
V5.0 移行	[ { "resource": { "cluster": true }, "actions": [ "appendOplogNote", "getDefaultRWConcern", "getShardMap", "hostInfo", "listDatabases", "listShards", "replSetGetConfig", "replSetGetStatus", "serverStatus" ] }, { "resource": { "db": "", "collection": "" }, "actions": [ "changeStream", "collStats", "find", "indexStats", "listCollections", "listIndexes" ] }, { "resource": { "db": "admin", "collection": "system.version" }, "actions": [ "find" ] }, { "resource": { "db": "", "collection": "system.js" }, "actions": [ "listCollections", "listIndexes" ] }, { "resource": { "db": "config", "collection": "shards" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "collections" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "version" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "settings" }, "actions": [ "find", "update" ] }]

最小の宛先特権は次のとおりです。

同期タイプ	最小宛先特権
default	[ { "resource": { "cluster": true }, "actions": [ "appendOplogNote", "getDefaultRWConcern", "getShardMap", "hostInfo", "listDatabases", "listShards", "replSetGetConfig", "replSetGetStatus", "serverStatus" ] }, { "resource": { "db": "", "collection": "" }, "actions": [ "bypassDocumentValidation", "changeStream", "collMod", "convertToCapped", "createCollection", "createIndex", "dropCollection", "dropIndex", "enableSharding", "find", "indexStats", "insert", "listCollections", "listIndexes", "remove", "renameCollectionSameDB", "update", "bypassWriteBlockingMode", "setUserWriteBlockMode" ] }, { "resource": { "db": "admin", "collection": "system.version" }, "actions": [ "find", "collStats" ] }, { "resource": { "db": "", "collection": "system.js" }, "actions": [ "listCollections", "listIndexes" ] }, { "resource": { "db": "", "collection": "system.views" }, "actions": [ "dropCollection" ] }, { "resource": { "db": "config", "collection": "version" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "collections" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "settings" }, "actions": [ "find", "update" ] }, { "resource": { "db": "config", "collection": "shards" }, "actions": [ "find", "update" ] }, { "resource": { "db": "config", "collection": "tags" }, "actions": [ "find", "update", "remove" ] }, { "resource": { "system_buckets": "" }, "actions": [ "listCollections", "listIndexes" ] }]
元に戻す	デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。 `[ { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }]`
複数の反転	デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。 `[ { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }]`

同期タイプ

最小宛先特権

default

[   {      "resource": { "cluster": true },      "actions": [         "appendOplogNote",         "getDefaultRWConcern",         "getShardMap",         "hostInfo",         "listDatabases",         "listShards",         "replSetGetConfig",         "replSetGetStatus",         "serverStatus"     ]   },   {      "resource": { "db": "", "collection": "" },      "actions": [         "bypassDocumentValidation",         "changeStream",         "collMod",         "convertToCapped",         "createCollection",         "createIndex",         "dropCollection",         "dropIndex",         "enableSharding",         "find",         "indexStats",         "insert",         "listCollections",         "listIndexes",         "remove",         "renameCollectionSameDB",         "update",         "bypassWriteBlockingMode",         "setUserWriteBlockMode"     ]   },   {      "resource": { "db": "admin", "collection": "system.version" },      "actions": [ "find", "collStats" ]   },   {      "resource": { "db": "", "collection": "system.js" },      "actions": [ "listCollections", "listIndexes" ]   },   {      "resource": { "db": "", "collection": "system.views" },      "actions": [ "dropCollection" ]   },   {      "resource": { "db": "config", "collection": "version" },      "actions": [ "find" ]   },   {      "resource": { "db": "config", "collection": "collections" },      "actions": [ "find" ]   },   {      "resource": { "db": "config", "collection": "settings" },      "actions": [ "find", "update" ]   },   {      "resource": { "db": "config", "collection": "shards" },      "actions": [ "find", "update" ]   },   {      "resource": { "db": "config", "collection": "tags" },      "actions": [ "find", "update", "remove" ]   },   {      "resource": { "system_buckets": "" },      "actions": [ "listCollections", "listIndexes" ]   }]

元に戻す

デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。

[   { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }]

複数の反転

デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。

[   { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }]

6.0 より前の移行

5.0ソースクラスターから移行する場合、ソースクラスターには clusterManager または v5.0 にリストされている最小権限が必要です。

v5.0 の最小ソース権限これらは次のとおりです。

同期タイプ	最小ソース特権
V5.0 移行	[ { "resource": { "cluster": true }, "actions": [ "appendOplogNote", "getDefaultRWConcern", "getShardMap", "hostInfo", "listDatabases", "listShards", "replSetGetConfig", "replSetGetStatus", "serverStatus" ] }, { "resource": { "db": "", "collection": "" }, "actions": [ "changeStream", "collStats", "find", "indexStats", "listCollections", "listIndexes" ] }, { "resource": { "db": "admin", "collection": "system.version" }, "actions": [ "find" ] }, { "resource": { "db": "", "collection": "system.js" }, "actions": [ "listCollections", "listIndexes" ] }, { "resource": { "db": "config", "collection": "shards" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "collections" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "version" }, "actions": [ "find" ] }, { "resource": { "db": "config", "collection": "settings" }, "actions": [ "find", "update" ] }]

同期タイプ

最小ソース特権

V5.0 移行

[   {      "resource": { "cluster": true },      "actions": [         "appendOplogNote",         "getDefaultRWConcern",         "getShardMap",         "hostInfo",         "listDatabases",         "listShards",         "replSetGetConfig",         "replSetGetStatus",         "serverStatus"     ]   },   {      "resource": { "db": "", "collection": "" },      "actions": [         "changeStream",         "collStats",         "find",         "indexStats",         "listCollections",         "listIndexes"     ]   },   {      "resource": { "db": "admin", "collection": "system.version" },      "actions": [ "find" ]   },   {      "resource": { "db": "", "collection": "system.js" },      "actions": [ "listCollections", "listIndexes" ]   },   {      "resource": { "db": "config", "collection": "shards" },      "actions": [ "find" ]   },   {      "resource": { "db": "config", "collection": "collections" },      "actions": [ "find" ]   },   {      "resource": { "db": "config", "collection": "version" },      "actions": [ "find" ]   },   {      "resource": { "db": "config", "collection": "settings" },      "actions": [ "find", "update" ]   }]

戻る

メトリクス

テレメトリー