Cloud Manager Access
On this page
- Considerations
- Google Accounts
- MongoDB Atlas Users
- Add Users to Cloud Manager
- Manage User Access to an Organization
- Add Users to an Organization
- View Active Users and Pending Invitations in an Organization
- Edit User's Role in an Organization
- Remove Users from an Organization
- Manage Team Access to an Organization
- Create a Team
- Manage Team Members
- Rename a Team
- Delete a Team
- Manage Application Access to an Organization
- Manage Access to a Project
- View Who Can Access a Project
- View Active Users and Pending Invitations to Project
- Add Users or Teams to a Project
- Remove Users or Teams from a Project
- Edit a User's or Team's Role in a Project
- Manage Application Access to a Project
- OAuth 2.0 authentication for programmatic access to Cloud Manager is available as a Preview feature.
- The feature and the corresponding documentation might change at any time during the Preview period. To use OAuth 2.0 authentication, create a service account to use in your requests to the Cloud Manager Public API.
To access a Cloud Manager organization or the project within that organization, a Cloud Manager user must be a member of that organization. Depending on the user's role in the organization, the Cloud Manager user may also need to be a member of the project to access a project.
A Cloud Manager user can be a member of multiple projects and multiple organizations. If a Cloud Manager user is a member of a project, the user's access to the project is determined their role in the project.
Within an organization, you can group users into teams. Users can belong to multiple teams. Teams can be assigned to multiple projects. The team's project role sets the team members' access to the project.
Note
Cloud Manager users are separate from MongoDB users.
Considerations
You can register with and login using your Google account or using your email account.
Google Accounts
If you register with your Google Account, the following differences apply when using your Google account with Cloud Manager:
Google manages your user details, email address, and password. You can't change this information using the Cloud Manager console or API.
Google manages your 2FA. You can't use Cloud Manager two factor authentication and won't be prompted for a Cloud Manager 2FA verification when you log into Cloud Manager. Google should verify your identity using Google 2-Step Verification
Google creates a new Cloud Manager account if you change your Google Account email address. Ask your
Organization Owner
or MongoDB Support to link this new account with your existing organizations and projects.You can unlink your Google Account from Cloud Manager. Refer to the Google Account Help article to unlink your Cloud Manager account from your Google Account.
MongoDB Atlas Users
If you use MongoDB Atlas, use your MongoDB Atlas credentials to log in to Cloud Manager. You can then create a new MongoDB Atlas project from Cloud Manager.
Add Users to Cloud Manager
You must invite users to Cloud Manager projects and organizations. The following procedures result in an email invitation being sent to the users you want to add. The users must accept your invitation to join a project or an organization.
Users can create accounts using:
The Cloud Manager account registration page or
Note
If you create an account in Jira or make any changes to that account from within Jira, it can take up to 30 minutes for that change to propagate to Cloud Manager. During this window you cannot add the user to a project in Cloud Manager. Also, passwords changed in Jira are subject to the same propagation delay for Cloud Manager accounts.
To invite a new user to a project, see Add Users or Teams to a Project.
To invite a new user to an organization, see Add Users to an Organization.
Manage User Access to an Organization
Note
Required Permissions
To perform any of the following actions, you must have the
Organization Owner
role.
Add Users to an Organization
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Specify User.
Select Invite Users from the Manage button menu.
From the Add Users page, enter the new user's email address or Jira username in the combo box.
If the console finds a connected Jira account, Cloud Manager invites the user to the Cloud Manager project. If the user accepts the invite, that user is added to the corresponding Jira group.
After typing in the email address or Jira username, you must either press Enter or click on the email address or Jira username beneath the New User header under the combo box.
Repeat for any additional users.
Choose the roles for the new Users.
By default, each user is given the Organization Member
role. To change or add additional roles for each user, click the
role dropdown menu, then select the checkboxes for each role you want the user to have in the organization.
View Active Users and Pending Invitations in an Organization
To view users in an organization:
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Edit User's Role in an Organization
To edit roles through Cloud Manager for the organization:
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Select the new role or roles for the user from the menu.
Remove Users from an Organization
Note
You cannot remove the last Organization Owner
from an
organization.
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Manage Team Access to an Organization
In an organization, you can group its users into teams to facilitate adding and granting roles to multiple users to projects. You assign project access at the team level. All users in the team share the same project access.
Organization users can belong to multiple teams.
Note
Required Permissions
To perform any of the following actions, you must have the
Organization Owner
role.
Create a Team
Note
There is an upper limit of 250 teams per organization.
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Create a new team.
Click Create Team.
From the Create a Team page, enter the your team name in the Name Your Team box. The name must be unique within an organization.
To add existing organization users to the team, click in the Add Members box and either start typing their Cloud Manager username or click on the name of a user that appears in the combo box.
Click Create Team to confirm.
Manage Team Members
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Rename a Team
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Delete a Team
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Manage Application Access to an Organization
Note
Required Permissions
To manage API Keys for an Organization, you must have the
Organization Owner
role.
To learn how to manage an Application's Access to an Organization using API Keys, see:
Manage Access to a Project
Note
Required Permissions
To perform any of the following actions, you must have either the
Project Owner
or Project User Admin
role.
View Who Can Access a Project
To view which users, teams, or API Keys can access a project:
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Click the tab for Users, Teams, or API Keys to see the appropriate access.
Each tab lists the project's users, teams, or API Keys along with their project roles and corresponding actions.
View Active Users and Pending Invitations to Project
In MongoDB Cloud Manager, go to the Project Access Manager page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
Do one of the following steps:
Select Project Access from the Access Manager menu in the navigation bar.
Next to the Projects menu, expand the Options menu, click Project Settings, and click Access Manager in the sidebar.
The Project Access Manager page displays.
Add Users or Teams to a Project
Note
There is an upper limit of 250 users per team.
In MongoDB Cloud Manager, go to the Project Access Manager page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
Do one of the following steps:
Select Project Access from the Access Manager menu in the navigation bar.
Next to the Projects menu, expand the Options menu, click Project Settings, and click Access Manager in the sidebar.
The Project Access Manager page displays.
Specify User or Team.
To add an individual user:
Select Invite Users from the Manage button menu.
From the Add Users page, enter the new user's email address or Jira username in the combo box.
If the console finds a connected Jira account, Cloud Manager invites the user to the Cloud Manager project. If the user accepts the invite, that user is added to the corresponding Jira group.
After typing in the email address or Jira username, either press Enter or click on the email address or Jira username beneath the New User header under the combo box.
Repeat for any additional users.
To add a team:
Select Create Team from the Manage button menu.
Enter the team's name in the Name Your Team box.
Enter the new team member's email address or Jira username in the Add Members combo box.
If the console finds a connected Jira account, Cloud Manager invites the user to the Cloud Manager project. If the user accepts the invite, that user is added to the corresponding Jira group.
After typing in the email address or Jira username, either press Enter or click on the email address or Jira username beneath the New User header under the combo box.
Repeat for any additional team members.
Choose the new roles for the User or Team.
By default, each user and team is given the Project
Member
role. To change or add additional roles for each user or
team, click on the role dropdown menu, then select the checkboxes for
each role you want the user or team to
have in the project.
All team members share the roles assigned to the team on this project.
Invite the Users or Create the Teams.
For a new user, click Add Users to Project.
Cloud Manager sends an e-mail to the selected users inviting them to join the project. Invited users do not have access to the project until they accept the invitation. Invitations expire after 30 days.
For a new team, click Create Team.
If the Cloud Manager finds a connected Jira account, Cloud Manager adds the user to the Jira group associated to the Cloud Manager project and organization.
Note
If the added user does not belong to the project's organization, Cloud Manager adds the user to the organization.
Remove Users or Teams from a Project
Note
You cannot remove the last Project Owner
from an
organization.
In MongoDB Cloud Manager, go to the Project Access Manager page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
Do one of the following steps:
Select Project Access from the Access Manager menu in the navigation bar.
Next to the Projects menu, expand the Options menu, click Project Settings, and click Access Manager in the sidebar.
The Project Access Manager page displays.
Edit a User's or Team's Role in a Project
To edit roles through Cloud Manager, for the project:
In MongoDB Cloud Manager, go to the Organization Settings page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Access Manager page.
Click Access Manager in the sidebar.
The Organization Access Manager page displays.
Select the new role or roles for the user from the menu.
Manage Application Access to a Project
Note
Required Permissions
To manage API Keys for an Organization, you must have the
Project User Admin
role.
To learn how to manage a Application's Access to an Project using API Keys, see: