MongoDB on v2020.1 Alteryx Server - Is it possible to add a read-only USER account?

[KJennings]

MongoDB on v2020.1 Alteryx Server

Is it possible to add a read-only USER type account to an embedded MongoDB on Alteryx Server v2020.1?  We would like to have a read-only account that can be use within workflows, without exposing the actual USER or USER ADMIN accounts.

Is this possible, and if so, what documentation is available to support this?

Thanks,

Kevin Jennings

[Loic]

Disclaimer: it is not supported to make any changes to the MongoDB. You should backup your server and mongoDB before you make any changes.

1- within workflows it is advised to use the already created "user". There are 2 passwords: one for the admin and one for the user. Use the "password" field. That's a read only account called "user" that has access to the Alteryx database.  You have the user name and password from the Server system settings.

 

2- You will find all of this on the MongoDB web site. I would advise you install MongoDB Compass https://docs.mongodb.com/compass/master/install/ - it is a graphical interface by MongoDB.

Again: to use at your own risks. Backup your MongoDB please.

[KJennings]

Hello Loic,

Thank  you for the response.  We are aware of the USER account and passwords that can be found within the server's system settings tool.  That part is documented well.

Since my initial email we executed some testing in a sandbox environment.  We found that the user account is not READ-ONLY (RO) but is READ-WRITE.  Using that account we were able to create roles and users for those roles within the MongoDB.

Since we are a regulated and audited business we do not want to provide open access to an account that could identify vulnerabilities to curious users.

Does Alteryx have any (documented) suggestions on how best to provide access to the information in the MongoDB without exposing ourselves to curious users?

Regards,

Kevin Jennings

[Loic]

simply install MongoDB tool,called Compass, that I linked previously and create a read-only user to your liking.  https://docs.mongodb.com/compass/master/install/ 

additional resources:

 

https://help.alteryx.com/current/server/mongodb-management  - schemas of the mongodb etc

https://help.alteryx.com/current/server/server-usage-report - a set of workflows that are built by alteryx against MongoDb - I would advise your start with using that. and then from there customize it to your own needs.