Navigation
This version of the documentation is archived and no longer supported. To learn how to upgrade your version of MongoDB Ops Manager, refer to the upgrade documentation.
You were redirected from a different version of the documentation. Click here to go back.

Manage Ops Manager Users

On this page

Overview

Ops Manager users provide access to Ops Manager groups. You can create a new user in a group to give access to that group. You can later give the user access to additional groups. When you create a user, you assign the user a role in the group. A role determines the actions the user can perform and the data the user can access.

Procedures

Add Users

1

Click Settings, then Users.

2

Click the Add User button.

3

Enter the new user’s email address and role.

4

Click Add/Invite.

5

If prompted, enter the two-factor verification code.

There might be a delay of a few seconds before you receive the prompt. Ops Manager will prompt you for a two-factor verification code if you have not verified recently.

6

Click the Send Email Invitation button.

Users can create accounts using the account registration page of your Ops Manager installation if Ops Manager configuration is not Invitation Only Mode. If the Ops Manager is in setting:: Invitation Only Mode, new users can register only by invitation. The invitation provides a URL that displays the registration link.

View Ops Manager Users

To view users, click Settings, then Users. The page lists users who have access to your Ops Manager group, their roles, their time zones, and other information. The page also lists any invitations to join the group waiting for a reply, as well as any requests from users who want to join the group. A user can request to join a group when first registering for Ops Manager.

View Invitations

When you invite a user to join a group, Ops Manager then sends an email to the prospective new user. To view invitations sent but not yet accepted, click Settings, then Users. The page lists any users with pending invitations. To cancel an invitation, click Cancel Invite.

Remove Ops Manager Users

1

Click Settings, then Users.

2

Click the trash can icon to the right of the user.

3

Click the user’s gear icon and select Delete User.

Assign Roles to Ops Manager Users

Assign roles to Ops Manager users to limit the actions they can perform and the data they can view.

To assign roles to users in a group, you must have either the User Admin role or Owner role in the group. The user who creates a group automatically has the Owner role.

To assign roles to any user in any group, you must have either the Global User Admin role or Global Owner role.

You can assign roles either through Ops Manager, as described here, or through an LDAP server after you have set up LDAP integration and created LDAP groups for your Ops Manager roles.

To assign roles inside of Ops Manager, click Settings, then Users. Click the user’s gear icon and select Edit User. Click the appropriate checkboxes to assign roles.

Assign Ops Manager Roles with LDAP

To assign roles through an LDAP server, you must set up LDAP integration and create LDAP groups for your Ops Manager roles. You must also have the permissions described in Assign Roles to Ops Manager Users.

For LDAP authentication, the welcome form includes the ability to assign LDAP groups to the Ops Manager group-level and global roles.

  1. Configure LDAP authentication.
  2. Create groups on your LDAP server for each of the available Ops Manager group-level and global roles.

To assign LDAP groups to Ops Manager roles:

  1. Click the Admin link at the top right of the Ops Manager page.
  2. Click General and then click Groups.
  3. Click the pencil icon at the far right of a group name. Edit the Roles interface by adding the appropriate LDAP group name to its corresponding Ops Manager group name.

Because Ops Manager does not update role assignments stored in your LDAP server, assign roles by assigning users to groups in your LDAP server.

Configure global roles in the conf-mms.properties configuration file.