grantPrivilegesToRolecommand has the following fields:
Field Type Description
string The name of the user-defined role to grant privileges to.
array The privileges to add to the role. For the format of a privilege, see
document Optional. The level of write concern for the modification. The
writeConcerndocument takes the same fields as the
A role’s privileges apply to the database where the role is created. A role created on the
admin database can include privileges that apply to all databases or to the cluster.
You must have the
grantRole action on the database a privilege targets in order to grant the privilege. To grant a privilege on multiple databases or on the
cluster resource, you must have the
grantRole action on the
grantPrivilegesToRole command grants two additional privileges to the
service role that exists in the
The first privilege in the
privileges array allows the user to search on all non-system collections in the
products database. The privilege does not allow queries on system collections, such as the
system.js collection. To grant access to these system collections, explicitly provision access in the
privileges array. See Resource Document.