Configure MongoDB Agent for Authentication

When you install the MongoDB Agent with Automation, Ops Manager creates a user to authenticate on the MongoDB database. Ops Manager create this MongoDB user (mms-automation) in the admin database with the correct privileges for each MongoDB Agent function.

Configure these credentials in Ops Manager.

1. Navigate to Deployment Security Settings

2. Continue through the modal until you see the Configure Ops Manager Agents page

3. Add the appropriate credentials:

   Setting	Value
   MongoDB Agent Username	Enter the MongoDB Agent username.
   MongoDB Agent Password	Enter the password for the MongoDB Agent username.

Each MongoDB Agent function uses a different set of MongoDB shell (mongosh) commands to configure a user with the appropriate roles and privileges.

Create a User

To back up MongoDB instances, create a user in the admin database. Assign this user the roles provided in the following example.

Use the following mongosh command to create the user:

db.getSiblingDB("admin").createUser(
   {
      user: "<username>",
      pwd: "<password>",
      roles: [ {
         role: "clusterAdmin", db: "admin"
      } ]
   }
)

To learn more about the required access, see Required Access for MongoDB Agent Backup.

Configure Backup Credentials

After you create the user for the Backup function, add the credentials to the Backup Settings.

1. Navigate to Backup <backup-deployment> Edit Credentials.

2. Click Credentials.

3. Add the appropriate credentials:

   Setting	Value
   Backup Username	Enter the Backup username.
   Backup Password	Enter the password for the Backup username.

Each MongoDB Agent function uses a different set of MongoDB shell (mongosh) commands to configure a user with the appropriate roles and privileges.

To monitor MongoDB instances that use SCRAM authentication, add a user to the admin database in MongoDB. Assign this user the roles provided in the following example.

db.getSiblingDB("admin").createUser(
   {
      user: "<username>",
      pwd: "<password>",
      roles: [ {
        role: "clusterMonitor", db: "admin"
      } ]
   }
)

To learn what roles this function requires, see Monitoring settings.

Configure Monitoring Credentials

After you create the user for the Monitoring function, add the credentials to the Monitoring Settings.

1. Navigate to Deployment <deployment> Monitoring Settings.

2. Click Credentials.

3. Add the appropriate credentials:

   Setting	Value
   Monitoring Username	Enter the Monitoring username.
   Monitoring Password	Enter the password for the Monitoring username.