A privilege action is a grantable authorization that specifies an operation an identity may perform on a resource. Assigning only required actions supports precise access control and least privilege. section 15.8.2 section 20.3.3
Atlas Stream Processing exposes actions for managing stream processors and connections, including:
- createStreamProcessor, startStreamProcessor, stopStreamProcessor, and dropStreamProcessor manage a stream processor's lifecycle. section 15.8.2
- listStreamProcessors, sampleStreamProcessor, streamProcessorStats, and listConnections support discovery, sampling, monitoring, and connection listing. section 15.8.2
- MongoDB privileges pair actions such as FIND, INSERT, or UPDATE with a database, collection, or other resource. section 20.3.3
Grant different actions on specific resources
Create a custom role with UPDATE access to the routes collection and FIND access to the sales collection: atlas customDbRoles create customReadUpdateRole --privilege 'UPDATE@sample_training.routes' --privilege 'FIND@sample_supplies.sales' This separates write access from read-only access instead of granting broader permissions. section 20.3.3
