Project roles and permissions of MongoDB Flex

STACKIT MongoDB Flex project roles

Role	Permissions	Title	Description
mongodb-flex.admin	mongodb-flex.advisor.listmongodb-flex.backup.clonemongodb-flex.backup.getmongodb-flex.backup.listmongodb-flex.backup.restore-listmongodb-flex.backup.restore-snapshotmongodb-flex.backup.updatemongodb-flex.flavor.listmongodb-flex.instance.createmongodb-flex.instance.deletemongodb-flex.instance.getmongodb-flex.instance.listmongodb-flex.instance.updatemongodb-flex.metric.getmongodb-flex.storage.listmongodb-flex.user.createmongodb-flex.user.deletemongodb-flex.user.getmongodb-flex.user.listmongodb-flex.user.resetmongodb-flex.user.updatemongodb-flex.version.getresource-manager.project.direct.getresource-manager.project.get	MongoDB Admin	Has admin access in the mongodb-flex domain. Can do anything that editor can.
mongodb-flex.editor	mongodb-flex.advisor.listmongodb-flex.backup.clonemongodb-flex.backup.getmongodb-flex.backup.listmongodb-flex.backup.restore-listmongodb-flex.backup.restore-snapshotmongodb-flex.backup.updatemongodb-flex.flavor.listmongodb-flex.instance.createmongodb-flex.instance.getmongodb-flex.instance.listmongodb-flex.instance.updatemongodb-flex.metric.getmongodb-flex.storage.listmongodb-flex.user.createmongodb-flex.user.getmongodb-flex.user.listmongodb-flex.user.resetmongodb-flex.user.updatemongodb-flex.version.getresource-manager.project.direct.getresource-manager.project.get	MongoDB Editor	Can edit resources in the mongodb-flex domain. Can do anything that reader can.
mongodb-flex.reader	mongodb-flex.advisor.listmongodb-flex.backup.getmongodb-flex.backup.listmongodb-flex.backup.restore-listmongodb-flex.flavor.listmongodb-flex.instance.getmongodb-flex.instance.listmongodb-flex.metric.getmongodb-flex.storage.listmongodb-flex.user.getmongodb-flex.user.listmongodb-flex.version.getresource-manager.project.direct.getresource-manager.project.get	MongoDB Reader	Can read any resource in the mongodb-flex domain.
mongodb-flex.user-admin	mongodb-flex.advisor.listmongodb-flex.backup.getmongodb-flex.backup.listmongodb-flex.backup.restore-listmongodb-flex.flavor.listmongodb-flex.instance.getmongodb-flex.instance.listmongodb-flex.metric.getmongodb-flex.storage.listmongodb-flex.user.createmongodb-flex.user.deletemongodb-flex.user.getmongodb-flex.user.listmongodb-flex.user.resetmongodb-flex.user.updatemongodb-flex.version.getresource-manager.project.direct.getresource-manager.project.get	MongoDB User Admin	Has admin access on MongoDB Flex users. Can do anything that reader can.

MongoDB Flex project permission to API mapping

Permission	API Endpoint/s	Description
mongodb-flex.advisor.list	/v1/projects/[projectId]/instances/[instanceId]/advisor/slow-queries (GET) /v1/projects/[projectId]/instances/[instanceId]/advisor/suggested-indexes (GET)	Gets slow queries from the Ops Manager performance advisorGets suggested indexes from the Ops Manager performance advisor
mongodb-flex.flavors.list	/v1/projects/[projectId]/flavors (GET)	Returns all possible flavors
mongodb-flex.instance.list	/v1/projects/[projectId]/instances (GET)	List all instances for a projectID
mongodb-flex.instance.create	/v1/projects/[projectId]/instances (POST)	Create and deploys an instance. Note that the time format for backupSchedule is in UTC
mongodb-flex.instance.delete	/v1/projects/[projectId]/instances/[instanceId] (DELETE)	Removes an instance
mongodb-flex.instance.get	/v1/projects/[projectId]/instances/[instanceId] (GET)	Gets information of an instance
mongodb-flex.instance.update	/v1/projects/[projectId]/instances/[instanceId] (PUT/PATCH)	Updates a deployment plan. Note that the time format for backupSchedule is in UTC
mongodb-flex.backup.list	/v1/projects/[projectId]/instances/[instanceId]/backups (GET)	List backups of an instance
mongodb-flex.backup.update	/v1/projects/[projectId]/instances/[instanceId]/backups (PUT)	Updates a backup schedule. Note that the time format is in UTC
mongodb-flex.backup.get	/v1/projects/[projectId]/instances/[instanceId]/backups/[backupId] (GET)	Get details about a specific backup
mongodb-flex.backup.clone	/v1/projects/[projectId]/instances/[instanceId]/clone (POST)	Clone an instance with PIT restore. Note that the Timestamp is a RFC3339 standard and uses by default UTC time format
mongodb-flex.backup.restore-list	/v1/projects/[projectId]/instances/[instanceId]/restores (GET)	List restore jobs of an instance
mongodb-flex.backup.restore-snapshot	/v1/projects/[projectId]/instances/[instanceId]/restores (POST)	Restore an instance based on snapshot
mongodb-flex.metrics.get	/v1/projects/[projectId]/instances/[instanceId]/metrics/[metric] (GET)	Returns metrics depending on the metric field: CPUDB storageDisk IOPSDisk UsageOperation Execution TimeMemory Metrics
mongodb-flex.users.list	/v1/projects/[projectId]/instances/[instanceId]/users (GET)	List all users for a MongoDB instance
mongodb-flex.user.create	/v1/projects/[projectId]/instances/[instanceId]/users (POST)	Create a new user for a MongoDB instance
mongodb-flex.user.get	/v1/projects/[projectId]/instances/[instanceId]/users/[userId] (GET)	Get detailed information of a user of a MongoDB instance
mongodb-flex.user.delete	/v1/projects/[projectId]/instances/[instanceId]/users/[userId] (DELETE)	Delete MongoDB user
mongodb-flex.user.update	/v1/projects/[projectId]/instances/[instanceId]/users/[userId] (PUT/PATCH)	Updates user for a MongoDB instance
mongodb-flex.user.reset	/v1/projects/[projectId]/instances/[instanceId]/users/[userId]/reset (POST)	Resets the password for an user
mongodb-flex.storage.list	/v1/projects/[projectId]/storages/[flavor] (GET)	Returns the storage for a certain flavor
mongodb-flex.version.get	/v1/projects/[projectId]/versions (GET)	Returns all available versions for creating endpoint