
This makes it easy for organizations to meet compliance standards in regulated industries. The permissions granted to the view are separate from those granted to the underlying views or collections. This greatly reduces the risk of data breaches.ĭBAs can also define aggregate views based on multiple collections or multiple existing views. For example, a view can exclude sensitive data fields, such as personal identifiable informatio n (PII), from sales data and health records.

Control Which Actions an Entity Can Performĭevelopers and database administrators (DBAs) have several ways to implement field-level security.ĭBAs can define unmaterialized views that expose only a subset of the data in the underlying MongoDB collection.Group Common Access Privileges into Roles.Best Practices for MongoDB Authorization.Enabling MongoDB Authorization Using RBAC.Field-Level Security Using Read-Only Views.MongoDB provides extensive authorization features including role-based access control (RBAC), LDAP authorization, and dynamic field level security. MongoDB authorization is a MongoDB security process that lets administrators define which authenticated users should have access to which resources, and what operations they should be allowed to perform on the resources.

Unlike traditional relational database management systems (RDBMS), MongoDB uses collections and documents instead of tables and rows. MongoDB is a document-oriented NoSQL database that can store large amounts of data.
