mongodb-security-admin

name	mongodb-security-admin
version	2.1.0
description	Master MongoDB security, authentication, authorization, encryption, and backup. Learn role-based access control, TLS/SSL, encryption, and disaster recovery. Use when securing deployments, managing users, or implementing compliance.
sasmp_version	1.3.0
bonded_agent	06-mongodb-security-administration
bond_type	PRIMARY_BOND
capabilities	["authentication-setup","authorization-rbac","encryption-config","tls-configuration","audit-logging","backup-restore"]
input_validation	{"required_context":["security_domain","environment"],"optional_context":["compliance_framework","existing_config","threat_model"]}
output_format	{"configuration":"object","implementation_steps":"array","verification_commands":"array","security_checklist":"array"}
error_handling	{"common_errors":[{"code":"SEC001","condition":"Authentication failed","recovery":"Verify credentials, check authSource, confirm user exists"},{"code":"SEC002","condition":"TLS handshake failed","recovery":"Verify certificate validity, check CA chain, confirm cipher support"},{"code":"SEC003","condition":"Authorization denied","recovery":"Check user roles, verify database permissions, review RBAC config"}]}
prerequisites	{"mongodb_version":"4.0+","required_knowledge":["user-management","network-basics"],"security_requirements":["Access to mongod config","Certificate management capability"]}
testing	{"unit_test_template":"// Verify authentication works\nconst client = new MongoClient(uri, { auth: { username, password } })\nawait client.connect()\nconst adminDb = client.db('admin')\nconst result = await adminDb.command({ connectionStatus: 1 })\nexpect(result.authInfo.authenticatedUsers).toHaveLength(1)\n"}

MongoDB Security & Administration

Master MongoDB security and operational practices.

Quick Start

Enable Authentication

# Create admin user before enabling auth
mongod --dbpath /data --logpath /var/log/mongod.log

mongo
> use admin
> db.createUser({
    user: 'admin',
    pwd: 'securepassword',
    roles: ['root']
  })

# Restart with auth enabled
mongod --auth --dbpath /data

Authentication

// Connect with credentials
const client = new MongoClient(
  'mongodb://admin:password@localhost:27017/?authSource=admin'
);

// Create application user
db.createUser({
  user: 'appuser',
  pwd: 'apppassword',
  roles: ['readWrite']
})

Authorization (RBAC)

// Built-in roles
/*
Admin Roles:
  - root: Full access
  - dbAdmin: Database administration
  - userAdmin: User management

Database Roles:
  - read: Read-only access
  - readWrite: Read and write

Cluster Roles:
  - clusterAdmin: Full cluster access
  - clusterManager: Cluster monitoring
  - clusterMonitor: Read-only monitoring
*/

// Create user with specific role
db.createUser({
  user: 'analyst',
  pwd: 'password',
  roles: [{ role: 'read', db: 'analytics' }]
})

// Grant multiple roles
db.grantRolesToUser('analyst', [
  { role: , :  },
  { : , :  }
])