MongoDB — Security & Access Control
Enable authentication (--auth), Role-Based Access Control (RBAC), and TLS/SSL connection encryption.
1Creating Admin Users & Enabling Auth
Security Setup
// Create admin user in mongosh
use admin
db.createUser({
user: "siteAdmin",
pwd: passwordPrompt(),
roles: [ { role: "userAdminAnyDatabase", db: "admin" }, "readWriteAnyDatabase" ]
});
// Restart mongod daemon with authentication enabled:
// mongod --auth --config /etc/mongod.conf