/ /

ユーザー権限

mongosync接続文字列で指定されたユーザーには、ソースクラスターと宛先クラスターで必要な権限が必要です。権限は、環境と逆同期を使用するかどうかによって異なります。

自己管理型クラスター

自己管理型権限は次のとおりです。

同期タイプ	必要なソース権限	必要な宛先権限
default	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`
元に戻す	`backup` `clusterManager` `clusterMonitor` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`
複数の反転	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`	`backup` `clusterManager` `clusterMonitor` `dbAdminAnyDatabase` `readWriteAnyDatabase` `restore`

For details on server roles, see: Role-Based Access Control in Self-Managed Deployments.

To update user permissions, see: grantRolesToUser.

表に記載されているロールに加えて、カスタムロールを使用して以下のソース権限をプロビジョニングします。

{
   "resource": { "db": "local", "collection": "oplog.rs" },
   "actions": [ "find", "collStats" ]
}

Atlas クラスター

Atlas の権限は次のとおりです。

同期タイプ	必要なソース権限	必要な宛先権限
default	atlasAdmin	atlasAdmin `bypassWriteBlockingMode`
元に戻す、または複数の元に戻す	atlasAdmin `bypassWriteBlockingMode`	atlasAdmin `bypassWriteBlockingMode`

For details on Atlas roles, see Atlas User Roles.

To update Atlas user permissions, see: Manage Access to a Project.

最小特権

注意

Mongosync のバージョン間で、最小限の権限が変更される可能性があります。

一部の特権アクションはカスタムロールを使用して Atlas で作成できないため、最小特権はオンプレミス配置にのみ適用されます。

最小のソース特権は次のとおりです。

同期タイプ

最小ソース特権

default

[
   {
       "resource": { "cluster": true },
       "actions": [
          "appendOplogNote",
          "bypassWriteBlockingMode",
          "getDefaultRWConcern",
          "getShardMap",
          "hostInfo",
          "listDatabases",
          "listShards",
          "replSetGetConfig",
          "replSetGetStatus",
          "serverStatus",
          "setUserWriteBlockMode"
       ]
   },
   {
       "resource": { "db": "", "collection": "" },
       "actions": [
          "changeStream",
          "collStats",
          "find",
          "indexStats",
          "listCollections",
          "listIndexes"
     ]
   },
   {
       "resource": { "db": "local", "collection": "oplog.rs" },
       "actions": [ "find", "collStats" ]
   },
   {
       "resource": { "db": "admin", "collection": "system.version" },
       "actions": [ "find" ]
   },
   {
       "resource": { "db": "", "collection": "system.js" },
       "actions": [ "listCollections", "listIndexes" ]
   },
   {
       "resource": { "db": "config", "collection": "shards" },
       "actions": [ "find" ]
   },
   {
       "resource": { "db": "config", "collection": "collections" },
       "actions": [ "find" ]
   },
   {
       "resource": { "db": "config", "collection": "version" },
       "actions": [ "find" ]
   },
   {
       "resource": { "db": "config", "collection": "settings" },
       "actions": [ "find", "update" ]
   },
   {
       "resource": { "system_buckets": "" },
       "actions": [ "listCollections", "listIndexes" ]
   }
]

元に戻す

デフォルトのソース特権とデフォルトの宛先特権のすべて。

複数の反転

デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。

[
    { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }
]

V5.0 移行

[
   {
      "resource": { "cluster": true },
      "actions": [
         "appendOplogNote",
         "getDefaultRWConcern",
         "getShardMap",
         "hostInfo",
         "listDatabases",
         "listShards",
         "replSetGetConfig",
         "replSetGetStatus",
         "serverStatus"
     ]
   },
   {
      "resource": { "db": "", "collection": "" },
      "actions": [
         "changeStream",
         "collStats",
         "find",
         "indexStats",
         "listCollections",
         "listIndexes"
     ]
   },
   {
      "resource": { "db": "admin", "collection": "system.version" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "", "collection": "system.js" },
      "actions": [ "listCollections", "listIndexes" ]
   },
   {
      "resource": { "db": "config", "collection": "shards" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "collections" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "version" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "settings" },
      "actions": [ "find", "update" ]
   }
]

最小の宛先特権は次のとおりです。

同期タイプ

最小宛先特権

default

[
   {
      "resource": { "cluster": true },
      "actions": [
         "appendOplogNote",
         "getDefaultRWConcern",
         "getShardMap",
         "hostInfo",
         "listDatabases",
         "listShards",
         "replSetGetConfig",
         "replSetGetStatus",
         "serverStatus"
     ]
   },
   {
      "resource": { "db": "", "collection": "" },
      "actions": [
         "bypassDocumentValidation",
         "changeStream",
         "collMod",
         "convertToCapped",
         "createCollection",
         "createIndex",
         "dropCollection",
         "dropIndex",
         "enableSharding",
         "find",
         "indexStats",
         "insert",
         "listCollections",
         "listIndexes",
         "remove",
         "renameCollectionSameDB",
         "update",
         "bypassWriteBlockingMode",
         "setUserWriteBlockMode"
     ]
   },
   {
      "resource": { "db": "admin", "collection": "system.version" },
      "actions": [ "find", "collStats" ]
   },
   {
      "resource": { "db": "", "collection": "system.js" },
      "actions": [ "listCollections", "listIndexes" ]
   },
   {
      "resource": { "db": "", "collection": "system.views" },
      "actions": [ "dropCollection" ]
   },
   {
      "resource": { "db": "config", "collection": "version" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "collections" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "settings" },
      "actions": [ "find", "update" ]
   },
   {
      "resource": { "db": "config", "collection": "shards" },
      "actions": [ "find", "update" ]
   },
   {
      "resource": { "db": "config", "collection": "tags" },
      "actions": [ "find", "update", "remove" ]
   },
   {
      "resource": { "system_buckets": "" },
      "actions": [ "listCollections", "listIndexes" ]
   }
]

元に戻す

デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。

[
   { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }
]

複数の反転

デフォルトのソース特権とデフォルトの宛先特権のすべてに次の追加が行われます。

[
   { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] }
]

6.0 より前の移行

When migrating from a 5.0 source cluster, the source cluster should either have clusterManager or the minimum permissions listed for v5.0.

v5.0 の最小ソース権限これらは次のとおりです。

同期タイプ

最小ソース特権

V5.0 移行

[
   {
      "resource": { "cluster": true },
      "actions": [
         "appendOplogNote",
         "getDefaultRWConcern",
         "getShardMap",
         "hostInfo",
         "listDatabases",
         "listShards",
         "replSetGetConfig",
         "replSetGetStatus",
         "serverStatus"
     ]
   },
   {
      "resource": { "db": "", "collection": "" },
      "actions": [
         "changeStream",
         "collStats",
         "find",
         "indexStats",
         "listCollections",
         "listIndexes"
     ]
   },
   {
      "resource": { "db": "admin", "collection": "system.version" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "", "collection": "system.js" },
      "actions": [ "listCollections", "listIndexes" ]
   },
   {
      "resource": { "db": "config", "collection": "shards" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "collections" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "version" },
      "actions": [ "find" ]
   },
   {
      "resource": { "db": "config", "collection": "settings" },
      "actions": [ "find", "update" ]
   }
]

戻る

メトリクス

テレメトリー