The remaining set of built-in roles falls into the general category of administration. Here is a summary of the built-in most commonly assigned administrative roles:
- dbAdmin: This role gives a database user the ability to administer the database by gathering statistics and listing, creating, and dropping the assigned database, and all of its collections and indexes.
- dbAdminAnyDatabase: This is the same as dbAdmin except that it applies to all databases.
- userAdmin: The userAdmin role gives a database user the ability to manage users for the current database, including the ability to reset passwords, as well as creating, dropping, or modifying roles and database users.
- userAdminAnyDatabase: This is the same as userAdmin except that it applies to all databases.
- dbOwner: This is a composite role that combines readWrite, dbAdmin, and userAdmin for a single database.
- clusterManager: Gives a database user to list, add, or remove members of a sharded cluster or...